VulnSea

apple has 379 CVEs on record. Disclosure cadence is accelerating: 287 in the last 90 days against 25 in the 90 before. The busiest recent month was September 2026 with 246. The median CVSS is 5.5 (medium), with 11 rated critical. 2% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 109 days (6 cases). The dominant weakness classes are CWE-120 (38) and CWE-787 (38). Most affected products: ipados (187), macos (133), safari (46).

CVEs per month

Last 12 months, by publish date

101112010203040506070809
Exploited share
2% vs 1% corpus
Median CVSS
5.5
Publish → KEV
109 d median(6)
Last 90 days
287 prev 25

Products

  • ipados 187
  • macos 133
  • safari 46
  • github.com/apple/swift-nio 3
  • CoreAudio 1
  • containerization 1
Follow apple:RSS feedSave a search →Embed badge ↗
379
Total CVEs
11
Critical
7
CISA KEV
7
Exploited

Worst active — by depth score

Apple vulnerabilities

CVEs affecting Apple, newest first. Open any entry for full detail, references, and exploit status.

379 CVEsRSS

CVE-2026-65347Medium· 6.5
1mo ago

The issue was addressed with improved checks

The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to a denial-of-service.

▾ Sunlitapple · ipadosEPSS 0.42%via NVD
CVE-2026-64782Low· 3.1⚖ disputed
1mo ago

A memory corruption vulnerability was addressed with improved locking

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted we…

▾ Sunlitapple · safariEPSS 0.34%via NVD
CVE-2026-65351Medium· 4.3PoC⚖ disputed
1mo ago

This issue was addressed through improved state management

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content m…

▾ Twilightapple · safariEPSS 0.46%via NVD
CVE-2026-65346High· 8.8
1mo ago

An integer overflow was addressed with improved input validation

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to arbitrary co…

▾ Twilightapple · ipadosEPSS 0.59%via NVD
CVE-2026-65331Medium· 4.3⚖ disputed
1mo ago

This issue was addressed through improved state management

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content m…

▾ Sunlitapple · safariEPSS 0.46%via NVD
CVE-2026-64760Medium· 5.5
1mo ago

An information leakage was addressed with additional validation

An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive ke…

▾ Sunlitapple · ipadosEPSS 0.16%via NVD
CVE-2026-43794High· 8.8
1mo ago

A memory corruption issue was addressed with improved memory handling

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing m…

▾ Twilightapple · safariEPSS 0.42%via NVD
CVE-2026-65400Critical· 9.8CISA KEVPoC
1mo ago

An authentication issue was addressed with improved state management

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to…

▾ Hadalapple · macosEPSS 1.2%via NVD
CVE-2026-64718Medium· 5.5⚖ disputed
2mo ago

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, Safari 27, iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.6, tvOS 2…

▾ Sunlitapple · safariEPSS 0.21%via NVD
CVE-2026-43763Medium· 5.5
2mo ago

A permissions issue was addressed by removing the vulnerable code

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.8, macOS Sequoia 15.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be able to read files outside of its …

▾ Sunlitapple · macosEPSS 0.15%via NVD
CVE-2026-43738Medium· 5.5
2mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset c…

▾ Sunlitapple · macosEPSS 0.17%via NVD
CVE-2026-43748Critical· 9.8
2mo ago

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

▾ Midnightapple · macosEPSS 0.58%via NVD
CVE-2026-64708Medium· 5.5
2mo ago

A file quarantine bypass was addressed with additional checks

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may bypass Gatekeeper checks.

▾ SunlitApple · macOSEPSS 0.17%via CVEORG
CVE-2026-43698High· 7.8
2mo ago

An injection issue was addressed with improved validation

An injection issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

▾ Twilightapple · macosEPSS 0.22%via NVD
CVE-2026-43760High· 8.6PoC
2mo ago

An access issue was addressed with improved access restrictions

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be able to access user-sensitive data.

▾ Midnightapple · macosEPSS 0.41%via NVD
CVE-2026-43823High· 7.5
2mo ago

When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit

When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests whe…

▾ Twilightapple · swift-cryptoEPSS 0.43%via NVD
CVE-2026-43820High· 7.7
2mo ago

NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs

NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1_STRING, but not all SANs are backed by ASN1_STRING, so accessing the buffer…

▾ Twilightapple · swiftnio_sslEPSS 0.11%via NVD
CVE-2026-43715High· 8.8
3mo ago

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, iOS 26.7 and iPadOS 26.7, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing ma…

▾ Twilightapple · safariEPSS 0.41%via NVD
CVE-2026-43743Medium· 4.7
3mo ago

A race condition was addressed with improved state handling

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, iOS 26.7 and iPadOS 26.7, macOS Tahoe 26.5.2, macOS Tahoe 26.7, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpe…

▾ Sunlitapple · ipadosEPSS 0.11%via NVD
CVE-2026-43746Medium· 6.5
3mo ago

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may …

▾ Sunlitapple · safariEPSS 0.34%via NVD
CVE-2026-28970Medium
3mo ago

SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator

SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator

▾ Sunlitapple · github.com/apple/swift-niovia GHSA
CVE-2026-43671High
3mo ago

SwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow

SwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow

▾ Twilightapple · github.com/apple/swift-niovia GHSA
CVE-2026-28980High
3mo ago

SwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS

SwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS

▾ Twilightapple · github.com/apple/swift-niovia GHSA
CVE-2026-28975Medium
3mo ago

NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length

NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length

▾ Sunlitapple · github.com/apple/swift-nio-extrasvia GHSA
CVE-2026-28898Low
3mo ago

SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec

SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec

▾ Sunlitapple · github.com/apple/swift-nio-http2EPSS 0.31%via GHSA
CVE-2026-20685Medium· 6.5PoC
4mo ago

An attacker in a privileged network position may be able to leak sensitive information

An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3.

▾ Twilightapple · private_cloud_computeEPSS 0.27%via NVD
CVE-2026-28969High· 7.5
4mo ago

A use after free issue was addressed with improved memory management

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.7, macOS Sequoia 15.8, ma…

▾ Twilightapple · ipadosEPSS 0.64%via NVD
CVE-2026-28995High· 8.8PoC
4mo ago

A logic issue was addressed with improved restrictions

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A…

▾ Midnightapple · ipadosEPSS 0.15%via NVD
CVE-2026-20696Medium· 5.5
4mo ago

An authorization issue was addressed with improved state management

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.4. An app may be able to access sensitive user data.

▾ Sunlitapple · macosEPSS 0.12%via NVD
CVE-2026-43658High· 7.5
4mo ago

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted…

▾ Twilightapple · ipadosEPSS 0.54%via NVD
Apple vulnerabilities (CVEs) — page 10 · VulnSea