VulnSea

apple has 872 CVEs on record. Disclosure cadence is accelerating: 654 in the last 90 days against 55 in the 90 before. The busiest recent month was October 2026 with 375. The median CVSS is 5.9 (medium), with 25 rated critical. 1% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 98 days (9 cases). The dominant weakness classes are CWE-120 (43) and CWE-787 (43). Most affected products: macOS (366), ipados (199), iOS and iPadOS (189).

CVEs per month

Last 12 months, by publish date

120102030405060708091011
Exploited share
1% vs 1% corpus
Median CVSS
5.9
Publish → KEV
98 d median(9)
Last 90 days
654 prev 55

Products

  • macOS 366
  • ipados 199
  • iOS and iPadOS 189
  • Safari 94
  • Xcode 8
  • Container 3
Follow apple:RSS feedSave a search →Embed badge ↗
872
Total CVEs
25
Critical
10
CISA KEV
10
Exploited

Worst active — by depth score

apple vulnerabilities

CVEs affecting apple, newest first. Open any entry for full detail, references, and exploit status.

871 CVEsRSS

CVE-2026-28819Medium· 5.4
5mo ago

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to execute arbitrary code with…

▾ Sunlitapple · ipadosEPSS 6.5%via NVD
CVE-2026-28967Medium· 4.9
5mo ago

A denial-of-service issue was addressed with improved input validation

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4. An attacker in a privileged network position may be able to cause a denial-of-service.

▾ SunlitApple · iOS and iPadOSEPSS 0.32%via CVEORG
CVE-2026-28991High· 7.5
5mo ago

An out-of-bounds read was addressed with improved bounds checking

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.8.2, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause a denial-of-s…

▾ TwilightApple · iOS and iPadOSEPSS 0.56%via CVEORG
CVE-2026-28860High· 7.5
5mo ago

The issue was addressed with improved input validation

The issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A…

▾ TwilightApple · iOS and iPadOSEPSS 0.38%via CVEORG
CVE-2026-28930High· 7.5
5mo ago

A permissions issue was addressed with additional restrictions

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.5. An app may be able to access protected user data.

▾ TwilightApple · macOSEPSS 0.32%via CVEORG
CVE-2026-28969High· 7.5
5mo ago

A use after free issue was addressed with improved memory management

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.7, macOS Sequoia 15.8, ma…

▾ Twilightapple · ipadosEPSS 0.53%via NVD
CVE-2026-28995High· 8.8PoC
5mo ago

A logic issue was addressed with improved restrictions

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A…

▾ Midnightapple · ipadosEPSS 0.12%via NVD
CVE-2026-20696Medium· 5.5
5mo ago

An authorization issue was addressed with improved state management

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.4. An app may be able to access sensitive user data.

▾ Sunlitapple · macosEPSS 0.12%via NVD
CVE-2026-43658High· 7.5
5mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted…

▾ Twilightapple · ipadosEPSS 0.32%via NVD
CVE-2026-28996Medium· 5.5
5mo ago

A race condition was addressed with additional validation

A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26…

▾ Sunlitapple · ipadosEPSS 0.11%via NVD
CVE-2026-28990High· 7.5PoC
5mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. …

▾ Midnightapple · ipadosEPSS 0.35%via NVD
CVE-2026-28958Medium· 5.5
5mo ago

This issue was addressed with improved data protection

This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.

▾ Sunlitapple · ipadosEPSS 0.14%via NVD
CVE-2026-28947High· 8.8
5mo ago

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing mali…

▾ Twilightapple · ipadosEPSS 0.38%via NVD
CVE-2026-43661High· 7.5
5mo ago

A buffer overflow issue was addressed with improved memory handling

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, …

▾ Twilightapple · ipadosEPSS 1.3%via NVD
CVE-2026-43653Medium· 6.2
5mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5. An attacker on the local networ…

▾ Sunlitapple · ipadosEPSS 0.18%via NVD
CVE-2026-28983High· 7.5
5mo ago

A type confusion issue was addressed with improved checks

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5…

▾ Twilightapple · ipadosEPSS 0.81%via NVD
CVE-2026-28961Medium· 4.6
5mo ago

This issue was addressed with improved checks

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. An attacker with physical access to a locked device may be able to view sensitive user information.

▾ Sunlitapple · macosEPSS 0.24%via NVD
CVE-2026-28936High· 7.5
5mo ago

The issue was addressed with improved checks

The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Sonoma 14.8.8, macOS Tahoe 26.5, visionOS 26.5. Processing a ma…

▾ Twilightapple · ipadosEPSS 0.56%via NVD
CVE-2026-28914Medium· 5.5
5mo ago

A logic issue was addressed with improved file handling

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

▾ Sunlitapple · macosEPSS 0.20%via NVD
CVE-2025-43219High· 8.8
7mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted image may corrupt process memory.

▾ Twilightapple · macosEPSS 0.43%via NVD
CVE-2025-43202High· 8.8
7mo ago

This issue was addressed with improved memory handling

This issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6. Processing a file may lead to memory corruption.

▾ Twilightapple · ipadosEPSS 0.43%via NVD
CVE-2026-28864Low· 3.3
7mo ago

This issue was addressed with improved permissions checking

This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, iOS 26.7.2 and iPadOS 26.7.2, macOS Sequoia 15.7.5, macOS Sequoia 15.8.2, macOS Sonoma 14.8.5, ma…

▾ SunlitApple · iOS and iPadOSEPSS 0.18%via CVEORG
CVE-2026-20668Medium· 5.5
7mo ago

A logging issue was addressed with improved data redaction

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, visionOS 26.3. An app may be able to …

▾ SunlitApple · iOS and iPadOSEPSS 0.18%via CVEORG
CVE-2026-20687High· 7.1PoC
7mo ago

A use after free issue was addressed with improved memory management

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, watchOS 26.4. An app may be able to c…

▾ MidnightApple · iOS and iPadOSEPSS 0.35%via CVEORG
CVE-2026-28868Medium· 5.5
7mo ago

A logging issue was addressed with improved data redaction

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. An app m…

▾ SunlitApple · iOS and iPadOSEPSS 0.20%via CVEORG
CVE-2026-28852Medium· 5.5
7mo ago

A stack overflow was addressed with improved input validation

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be a…

▾ SunlitApple · iOS and iPadOSEPSS 0.22%via CVEORG
CVE-2026-20665Medium· 6.5
7mo ago

This issue was addressed through improved state management

This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously craf…

▾ SunlitApple · SafariEPSS 0.63%via CVEORG
CVE-2026-28886Medium· 5.9
7mo ago

A null pointer dereference was addressed with improved input validation

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4…

▾ SunlitApple · iOS and iPadOSEPSS 0.66%via CVEORG
CVE-2026-20690Medium· 6.5
7mo ago

An out-of-bounds access issue was addressed with improved bounds checking

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26…

▾ SunlitApple · iOS and iPadOSEPSS 0.75%via CVEORG
CVE-2026-28865High· 7.5
7mo ago

An authentication issue was addressed with improved state management

An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, w…

▾ TwilightApple · iOS and iPadOSEPSS 0.79%via CVEORG
apple vulnerabilities (CVEs) — page 24 · VulnSea