Apple: CISA KEV History
Every Apple vulnerability in the CISA Known Exploited Vulnerabilities catalog: confirmed in-the-wild exploitation, addition timeline, and ransomware linkage. Rebuilt automatically on every site deploy.
Snapshot: 2026-09-08 · Source: CISA KEV Catalog · Full KEV dashboard
KEV entries
94
Added, last 12 months
10
Ransomware-linked
0
Latest addition
2026-08-18
Apple KEV additions per month, last 24 months
Most-listed products: Multiple Products, iOS, iPadOS, and macOS, iOS, macOS, iOS and iPadOS.
Latest 50 of 94 Apple KEV entries
| CVE | Vulnerability | Added | Ransomware |
|---|---|---|---|
| CVE-2026-65400 | Apple macOS Improper Authentication Vulnerability | 2026-08-18 | No |
| CVE-2025-43510 | Apple Multiple Products Improper Locking Vulnerability | 2026-03-20 | No |
| CVE-2025-43520 | Apple Multiple Products Classic Buffer Overflow Vulnerability | 2026-03-20 | No |
| CVE-2025-31277 | Apple Multiple Products Buffer Overflow Vulnerability | 2026-03-20 | No |
| CVE-2023-43000 | Apple Multiple products Use-After-Free Vulnerability | 2026-03-05 | No |
| CVE-2021-30952 | Apple Multiple Products Integer Overflow or Wraparound Vulnerability | 2026-03-05 | No |
| CVE-2023-41974 | Apple iOS and iPadOS Use-After-Free Vulnerability | 2026-03-05 | No |
| CVE-2026-20700 | Apple Multiple Buffer Overflow Vulnerability | 2026-02-12 | No |
| CVE-2025-43529 | Apple Multiple Products Use-After-Free WebKit Vulnerability | 2025-12-15 | No |
| CVE-2022-48503 | Apple Multiple Products Unspecified Vulnerability | 2025-10-20 | No |
| CVE-2025-43300 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | 2025-08-21 | No |
| CVE-2025-43200 | Apple Multiple Products Unspecified Vulnerability | 2025-06-16 | No |
| CVE-2025-31201 | Apple Multiple Products Arbitrary Read and Write Vulnerability | 2025-04-17 | No |
| CVE-2025-31200 | Apple Multiple Products Memory Corruption Vulnerability | 2025-04-17 | No |
| CVE-2025-24201 | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability | 2025-03-13 | No |
| CVE-2025-24200 | Apple iOS and iPadOS Incorrect Authorization Vulnerability | 2025-02-12 | No |
| CVE-2025-24085 | Apple Multiple Products Use-After-Free Vulnerability | 2025-01-29 | No |
| CVE-2024-44309 | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability | 2024-11-21 | No |
| CVE-2024-44308 | Apple Multiple Products Code Execution Vulnerability | 2024-11-21 | No |
| CVE-2024-23225 | Apple Multiple Products Memory Corruption Vulnerability | 2024-03-06 | No |
| CVE-2024-23296 | Apple Multiple Products Memory Corruption Vulnerability | 2024-03-06 | No |
| CVE-2022-48618 | Apple Multiple Products Memory Corruption Vulnerability | 2024-01-31 | No |
| CVE-2024-23222 | Apple Multiple Products WebKit Type Confusion Vulnerability | 2024-01-23 | No |
| CVE-2023-41990 | Apple Multiple Products Code Execution Vulnerability | 2024-01-08 | No |
| CVE-2023-42917 | Apple Multiple Products WebKit Memory Corruption Vulnerability | 2023-12-04 | No |
| CVE-2023-42916 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 2023-12-04 | No |
| CVE-2023-42824 | Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability | 2023-10-05 | No |
| CVE-2023-41991 | Apple Multiple Products Improper Certificate Validation Vulnerability | 2023-09-25 | No |
| CVE-2023-41992 | Apple Multiple Products Kernel Privilege Escalation Vulnerability | 2023-09-25 | No |
| CVE-2023-41993 | Apple Multiple Products WebKit Code Execution Vulnerability | 2023-09-25 | No |
| CVE-2023-41064 | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | 2023-09-11 | No |
| CVE-2023-41061 | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | 2023-09-11 | No |
| CVE-2023-38606 | Apple Multiple Products Kernel Unspecified Vulnerability | 2023-07-26 | No |
| CVE-2023-37450 | Apple Multiple Products WebKit Code Execution Vulnerability | 2023-07-13 | No |
| CVE-2023-32434 | Apple Multiple Products Integer Overflow Vulnerability | 2023-06-23 | No |
| CVE-2023-32435 | Apple Multiple Products WebKit Memory Corruption Vulnerability | 2023-06-23 | No |
| CVE-2023-32439 | Apple Multiple Products WebKit Type Confusion Vulnerability | 2023-06-23 | No |
| CVE-2023-32409 | Apple Multiple Products WebKit Sandbox Escape Vulnerability | 2023-05-22 | No |
| CVE-2023-28204 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 2023-05-22 | No |
| CVE-2023-32373 | Apple Multiple Products WebKit Use-After-Free Vulnerability | 2023-05-22 | No |
| CVE-2019-8526 | Apple macOS Use-After-Free Vulnerability | 2023-04-17 | No |
| CVE-2023-28205 | Apple Multiple Products WebKit Use-After-Free Vulnerability | 2023-04-10 | No |
| CVE-2023-28206 | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | 2023-04-10 | No |
| CVE-2021-30900 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | 2023-03-30 | No |
| CVE-2023-23529 | Apple Multiple Products WebKit Type Confusion Vulnerability | 2023-02-14 | No |
| CVE-2022-42856 | Apple iOS Type Confusion Vulnerability | 2022-12-14 | No |
| CVE-2022-42827 | Apple iOS and iPadOS Out-of-Bounds Write Vulnerability | 2022-10-25 | No |
| CVE-2022-32917 | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability | 2022-09-14 | No |
| CVE-2020-9934 | Apple iOS, iPadOS, and macOS Input Validation Vulnerability | 2022-09-08 | No |
| CVE-2021-31010 | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability | 2022-08-25 | No |
CVE links go to our explainer when one exists, otherwise to the NVD record.
Data: official CISA KEV catalog, fetched at build time. Figures may be reused with attribution to East Bay Cyber and CISA. See also the KEV Velocity Dashboard and all tracked vendors.