[ Vendor · 151 CVEs ]
Apple
CVEs affecting Apple published in the last 30 days, plus any Apple CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2022-32893 | 24 Aug 2022 | CVSS 8.8 | Apple iOS and macOS Out-of-Bounds WriteAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1… | Exploited |
| CVE-2022-32894 | 24 Aug 2022 | CVSS 7.8 | Apple iOS and macOS Out-of-Bounds WriteAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1… | Exploited |
| CVE-2022-22674 | 26 May 2022 | CVSS 5.5 | Apple macOS Out-of-Bounds ReadAn out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is… | Exploited |
| CVE-2022-22675 | 26 May 2022 | CVSS 7.8 | Apple macOS Out-of-Bounds WriteAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS… | Exploited |
| CVE-2022-22620 | 18 Mar 2022 | CVSS 8.8 | Apple iOS, iPadOS, and macOS Webkit Use-After-FreeA use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1… | Exploited |
| CVE-2022-22587 | 18 Mar 2022 | CVSS 9.8 | Apple Memory CorruptionA memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS… | Exploited |
| CVE-2021-30807 | 19 Oct 2021 | CVSS 7.8 | Apple Multiple Products Memory CorruptionA memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1… | Exploited |
| CVE-2021-30713 | 8 Sep 2021 | CVSS 7.8 | Apple macOS UnspecifiedA permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass… | Exploited |
| CVE-2021-30657 | 8 Sep 2021 | CVSS 5.5 | Apple macOS UnspecifiedA logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious… | Exploited |
| CVE-2021-30661 | 8 Sep 2021 | CVSS 8.8 | Apple Multiple Products WebKit Storage Use-After-FreeA use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5… | Exploited |
| CVE-2021-30663 | 8 Sep 2021 | CVSS 8.8 | Apple Multiple Products WebKit Integer OverflowAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari… | Exploited |
| CVE-2021-30665 | 8 Sep 2021 | CVSS 8.8 | Apple Multiple Products WebKit Memory CorruptionA memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS… | Exploited |
| CVE-2021-30666 | 8 Sep 2021 | CVSS 8.8 | Apple iOS WebKit Buffer OverflowA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content… | Exploited |
| CVE-2021-30761 | 8 Sep 2021 | CVSS 8.8 | Apple iOS WebKit Memory CorruptionA memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content… | Exploited |
| CVE-2021-30762 | 8 Sep 2021 | CVSS 8.8 | Apple iOS WebKit Use-After-FreeA use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content… | Exploited |
| CVE-2021-31010 | 24 Aug 2021 | CVSS 7.5 | Apple iOS, macOS, watchOS Sandbox BypassA deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and… | Exploited |
| CVE-2021-30983 | 24 Aug 2021 | CVSS 7.8 | Apple iOS and iPadOS Buffer OverflowA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to… | Exploited |
| CVE-2021-30952 | 24 Aug 2021 | CVSS 7.8 | Apple Multiple Products Integer Overflow or WraparoundAn integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and… | Exploited |
| CVE-2021-30900 | 24 Aug 2021 | CVSS 7.8 | Apple iOS, iPadOS, and macOS Out-of-Bounds WriteAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS… | Exploited |
| CVE-2021-30883 | 24 Aug 2021 | CVSS 7.8 | Apple Multiple Products Memory CorruptionA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1… | Exploited |
| CVE-2021-30869 | 24 Aug 2021 | CVSS 7.8 | Apple iOS, iPadOS, and macOS Type ConfusionA type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2… | Exploited |
| CVE-2021-30858 | 24 Aug 2021 | CVSS 8.8 | Apple iOS, iPadOS, macOS Use-After-FreeA use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing… | Exploited |
| CVE-2021-30860 | 24 Aug 2021 | CVSS 7.8 | Apple Multiple Products Integer OverflowAn integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8… | Exploited |
| CVE-2021-1870 | 2 Apr 2021 | CVSS 9.8 | Apple iOS, iPadOS, and macOS WebKit Remote Code ExecutionA logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update… | Exploited |
| CVE-2021-1871 | 2 Apr 2021 | CVSS 9.8 | Apple iOS, iPadOS, and macOS WebKit Remote Code ExecutionA logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update… | Exploited |
| CVE-2021-1879 | 2 Apr 2021 | CVSS 6.1 | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS)This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3… | Exploited |
| CVE-2021-1782 | 2 Apr 2021 | CVSS 7.0 | Apple Multiple Products Race ConditionA race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update… | Exploited |
| CVE-2021-1789 | 2 Apr 2021 | CVSS 8.8 | Apple Multiple Products Type ConfusionA type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina… | Exploited |
| CVE-2020-27930 | 8 Dec 2020 | CVSS 7.8 | Apple Multiple Products Memory CorruptionA memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS… | Exploited |
| CVE-2020-27932 | 8 Dec 2020 | CVSS 7.8 | Apple Multiple Products Type ConfusionA type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS… | Exploited |
| CVE-2020-27950 | 8 Dec 2020 | CVSS 5.5 | Apple Multiple Products Memory InitializationA memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update… | Exploited |
| CVE-2020-9934 | 16 Oct 2020 | CVSS 5.5 | Apple iOS, iPadOS, and macOS Input ValidationAn issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and… | Exploited |
| CVE-2020-9907 | 16 Oct 2020 | CVSS 7.8 | Apple Multiple Products Memory CorruptionA memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application… | Exploited |
| CVE-2020-9818 | 9 Jun 2020 | CVSS 8.8 | Apple iOS, iPadOS, and watchOS Out-of-Bounds WriteAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5… | Exploited |
| CVE-2020-9819 | 9 Jun 2020 | CVSS 4.3 | Apple iOS, iPadOS, and watchOS Memory CorruptionA memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5… | Exploited |
| CVE-2020-9859 | 5 Jun 2020 | CVSS 7.8 | Apple Multiple Products Code ExecutionA memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5… | Exploited |
| CVE-2020-3837 | 27 Feb 2020 | CVSS 7.8 | Apple Multiple Products Memory CorruptionA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3… | Exploited |
| CVE-2019-8605 | 18 Dec 2019 | CVSS 7.8 | Apple Multiple Products Use-After-FreeA use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS… | Exploited |
| CVE-2019-8526 | 18 Dec 2019 | CVSS 7.8 | Apple macOS Use-After-FreeA use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain… | Exploited |
| CVE-2019-7286 | 18 Dec 2019 | CVSS 7.8 | Apple Multiple Products Memory CorruptionA memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update… | Exploited |
| CVE-2019-7287 | 18 Dec 2019 | CVSS 7.8 | Apple iOS Memory CorruptionA memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute… | Exploited |
| CVE-2019-8506 | 18 Dec 2019 | CVSS 8.8 | Apple Multiple Products Type ConfusionA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes… | Exploited |
| CVE-2018-4344 | 3 Apr 2019 | CVSS 7.8 | Apple Multiple Products Memory CorruptionA memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12… | Exploited |
| CVE-2019-6223 | 5 Mar 2019 | CVSS 7.5 | Apple iOS and macOS Group FacetimeA logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS… | Exploited |
| CVE-2016-4657 | 25 Aug 2016 | CVSS 8.8 | Apple iOS Webkit Memory CorruptionWebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… | Exploited |
| CVE-2016-4656 | 25 Aug 2016 | CVSS 7.8 | Apple iOS Memory CorruptionThe kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory… | Exploited |
| CVE-2016-4655 | 25 Aug 2016 | CVSS 5.5 | Apple iOS Information DisclosureThe kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app. | Exploited |
| CVE-2015-5477 | 29 Jul 2015 | CVSS 7.5 | Crafted TKEY queries crash ISC BIND DNS serversnamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and… | ExploitedFix |
| CVE-2015-1130 | 10 Apr 2015 | CVSS 7.8 | Apple OS X Authentication BypassThe XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via… | Exploited |
| CVE-2014-4404 | 18 Sep 2014 | CVSS 7.8 | Apple OS X Heap-Based Buffer OverflowHeap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged… | Exploited |
| CVE-2012-1823 | 11 May 2012 | CVSS 9.8 | PHP-CGI Query String Parametersapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query… | ExploitedFix |
Page 2 of 2