Vendor
Apple
9,226 known vulnerabilities in products by Apple, 106 of them actively exploited (CISA KEV).
Key figures
9,226
Vulnerabilities
106
Actively exploited (KEV)
2
Used by ransomware
553
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomware | 10.0 | |
| Critical | CVE-2022-2294 | WebRTC Heap Buffer Overflow Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2025-43300 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2025-31200 | Apple Multiple Products Memory Corruption Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2025-14174 | Google Chromium Out of Bounds Memory Access Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2025-24085 | Apple Multiple Products Use-After-Free Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2025-31201 | Apple Multiple Products Arbitrary Read and Write Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2025-43529 | Apple Multiple Products Use-After-Free WebKit Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2012-1823 | PHP-CGI Query String Parameter Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2025-6558 | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2023-5217 | Google Chromium libvpx Heap Buffer Overflow Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2024-44308 | Apple Multiple Products Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2023-41993 | Apple Multiple Products WebKit Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2023-32439 | Apple Multiple Products WebKit Type Confusion Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2023-28205 | Apple Multiple Products WebKit Use-After-Free Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2022-22587 | Apple Memory Corruption Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2023-32435 | Apple Multiple Products WebKit Memory Corruption Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2025-24201 | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2023-37450 | Apple Multiple Products WebKit Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2016-4657 | Apple iOS Webkit Memory Corruption Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2023-28206 | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability In CISA KEV | 8.6 | |
| Critical | CVE-2024-23222 | Apple Multiple Products WebKit Type Confusion Vulnerability In CISA KEV | 8.8 |
News
- Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Paththehackernews,
- Apple Zero-Day Vulnerability Weaponized in Targeted Attacksdarkreading,
- Apple Patches Zero-Day Linked to ‘Extremely Sophisticated Attack’securityweek,
- Vulnérabilité dans les produits Apple (29 septembre 2026)cert-fr,
- Apple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950), (Mon, Sep 28th)sans-isc-diary,
- Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacksthehackernews,