apple has 872 CVEs on record. Disclosure cadence is accelerating: 654 in the last 90 days against 55 in the 90 before. The busiest recent month was October 2026 with 375. The median CVSS is 5.9 (medium), with 25 rated critical. 1% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 98 days (9 cases). The dominant weakness classes are CWE-120 (43) and CWE-787 (43). Most affected products: macOS (366), ipados (199), iOS and iPadOS (189).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 1% vs 1% corpus
- Median CVSS
- 5.9
- Publish → KEV
- 98 d median(9)
- Last 90 days
- 654 prev 55
Weakness classes
Products
- macOS 366
- ipados 199
- iOS and iPadOS 189
- Safari 94
- Xcode 8
- Container 3
Worst active — by depth score
CVE-2026-86950High· 8.8An out-of-bounds write issue was addressed with improved bounds checking79CVE-2026-65400Critical· 9.8An authentication issue was addressed with improved state management79CVE-2025-43529High· 8.8A use-after-free issue was addressed with improved memory management79CVE-2023-43000High· 8.8A use-after-free issue was addressed with improved memory management74CVE-2025-31277High· 8.8The issue was addressed with improved memory handling74
apple vulnerabilities
CVEs affecting apple, newest first. Open any entry for full detail, references, and exploit status.
871 CVEsRSS
CVE-2026-43738Medium· 5.5The issue was addressed with improved memory handling
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset c…
CVE-2026-43748Critical· 9.8An out-of-bounds write issue was addressed with improved bounds checking
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2026-64708Medium· 5.5A file quarantine bypass was addressed with additional checks
A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may bypass Gatekeeper checks.
CVE-2026-43698High· 7.8An injection issue was addressed with improved validation
An injection issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
CVE-2026-43760High· 8.6PoCAn access issue was addressed with improved access restrictions
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be able to access user-sensitive data.
CVE-2026-43823High· 7.5When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit
When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests whe…
CVE-2026-43820High· 7.7NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs
NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1_STRING, but not all SANs are backed by ASN1_STRING, so accessing the buffer…
CVE-2026-43715High· 8.8A use-after-free issue was addressed with improved memory management
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, iOS 26.7 and iPadOS 26.7, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing ma…
CVE-2026-43743Medium· 4.7A race condition was addressed with improved state handling
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, iOS 26.7 and iPadOS 26.7, macOS Tahoe 26.5.2, macOS Tahoe 26.7, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpe…
CVE-2026-43746Medium· 6.5A use-after-free issue was addressed with improved memory management
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may …
CVE-2026-28970MediumSwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator
SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator
CVE-2026-43671HighSwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow
SwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow
CVE-2026-28980HighSwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS
SwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS
CVE-2026-28975MediumNIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length
NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length
CVE-2026-28898LowSwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec
SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec
CVE-2025-46315High· 7.5A permissions issue was addressed with additional restrictions
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data.
CVE-2025-46313Medium· 5.5A logging issue was addressed with improved data redaction
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVE-2025-46308Medium· 5.3An authorization issue was addressed with improved state management
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to leak sensitive user information.
CVE-2025-46293Medium· 5.5This issue was addressed with improved handling of symlinks
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.
CVE-2025-43339Medium· 5.5An access issue was addressed with additional sandbox restrictions
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to access sensitive user data.
CVE-2025-43278Medium· 5.5This issue was addressed with improved handling of symlinks
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.
CVE-2025-31272High· 7.8The issue was addressed with improved checks
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges.
CVE-2025-30459Medium· 5.5A privacy issue was addressed by removing the vulnerable code
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.
CVE-2025-30431Medium· 5.5The issue was addressed with improved checks
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access private information.
CVE-2025-24284High· 8.8This issue was addressed with improved checks to prevent unauthorized actions
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Sequoia 15.4. An app may be able to break out of its sandbox.
CVE-2025-24268Medium· 5.5A parsing issue in the handling of directory paths was addressed with improved path validation
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.
CVE-2025-24165Medium· 5.5A permissions issue was addressed with additional restrictions
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination.
CVE-2026-20685Medium· 6.5PoCAn attacker in a privileged network position may be able to leak sensitive information
An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3.
CVE-2025-43524High· 8.8An access issue was addressed with additional sandbox restrictions
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.2. An app may be able to break out of its sandbox.
CVE-2025-46311High· 7.5An inconsistent user interface issue was addressed with improved state management
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. An app may be able to access sensitive user data.