--- title: "Apple: known exploited vulnerabilities" url: https://erroneo.us/security/vendor/apple/ description: "Every Apple vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (28), newest first, with due dates and fixes." type: vendor section: "Security Digest" date_modified: 2026-09-29 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Apple: known exploited vulnerabilities - 2026-09-29 [CVE-2026-86950](https://erroneo.us/security/cve/CVE-2026-86950/index.md) Apple Multiple Products: Apple Multiple Products Out-of-Bounds Write Vulnerability (due 2026-10-13; ransomware: Unknown) - 2026-08-18 [CVE-2026-65400](https://erroneo.us/security/cve/CVE-2026-65400/index.md) Apple macOS: Apple macOS Improper Authentication Vulnerability (due 2026-08-21; ransomware: Unknown) - 2026-03-20 [CVE-2025-43520](https://erroneo.us/security/cve/CVE-2025-43520/index.md) Apple Multiple Products: Apple Multiple Products Classic Buffer Overflow Vulnerability (due 2026-04-03; ransomware: Unknown) - 2026-03-20 [CVE-2025-43510](https://erroneo.us/security/cve/CVE-2025-43510/index.md) Apple Multiple Products: Apple Multiple Products Improper Locking Vulnerability (due 2026-04-03; ransomware: Unknown) - 2026-03-20 [CVE-2025-31277](https://erroneo.us/security/cve/CVE-2025-31277/index.md) Apple Multiple Products: Apple Multiple Products Buffer Overflow Vulnerability (due 2026-04-03; ransomware: Unknown) - 2026-03-05 [CVE-2023-43000](https://erroneo.us/security/cve/CVE-2023-43000/index.md) Apple Multiple Products: Apple Multiple products Use-After-Free Vulnerability (due 2026-03-26; ransomware: Unknown) - 2026-03-05 [CVE-2023-41974](https://erroneo.us/security/cve/CVE-2023-41974/index.md) Apple iOS and iPadOS: Apple iOS and iPadOS Use-After-Free Vulnerability (due 2026-03-26; ransomware: Unknown) - 2026-03-05 [CVE-2021-30952](https://erroneo.us/security/cve/CVE-2021-30952/index.md) Apple Multiple Products: Apple Multiple Products Integer Overflow or Wraparound Vulnerability (due 2026-03-26; ransomware: Unknown) - 2026-02-12 [CVE-2026-20700](https://erroneo.us/security/cve/CVE-2026-20700/index.md) Apple Multiple Products: Apple Multiple Buffer Overflow Vulnerability (due 2026-03-05; ransomware: Unknown) - 2025-12-15 [CVE-2025-43529](https://erroneo.us/security/cve/CVE-2025-43529/index.md) Apple Multiple Products: Apple Multiple Products Use-After-Free WebKit Vulnerability (due 2026-01-05; ransomware: Unknown) - 2025-10-20 [CVE-2022-48503](https://erroneo.us/security/cve/CVE-2022-48503/index.md) Apple Multiple Products: Apple Multiple Products Unspecified Vulnerability (due 2025-11-10; ransomware: Unknown) - 2025-08-21 [CVE-2025-43300](https://erroneo.us/security/cve/CVE-2025-43300/index.md) Apple iOS, iPadOS, and macOS: Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability (due 2025-09-11; ransomware: Unknown) - 2025-06-16 [CVE-2025-43200](https://erroneo.us/security/cve/CVE-2025-43200/index.md) Apple Multiple Products: Apple Multiple Products Unspecified Vulnerability (due 2025-07-07; ransomware: Unknown) - 2025-04-17 [CVE-2025-31201](https://erroneo.us/security/cve/CVE-2025-31201/index.md) Apple Multiple Products: Apple Multiple Products Arbitrary Read and Write Vulnerability (due 2025-05-08; ransomware: Unknown) - 2025-04-17 [CVE-2025-31200](https://erroneo.us/security/cve/CVE-2025-31200/index.md) Apple Multiple Products: Apple Multiple Products Memory Corruption Vulnerability (due 2025-05-08; ransomware: Unknown) - 2025-03-13 [CVE-2025-24201](https://erroneo.us/security/cve/CVE-2025-24201/index.md) Apple Multiple Products: Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability (due 2025-04-03; ransomware: Unknown) - 2025-02-12 [CVE-2025-24200](https://erroneo.us/security/cve/CVE-2025-24200/index.md) Apple iOS and iPadOS: Apple iOS and iPadOS Incorrect Authorization Vulnerability (due 2025-03-05; ransomware: Unknown) - 2025-01-29 [CVE-2025-24085](https://erroneo.us/security/cve/CVE-2025-24085/index.md) Apple Multiple Products: Apple Multiple Products Use-After-Free Vulnerability (due 2025-02-19; ransomware: Unknown) - 2024-11-21 [CVE-2024-44309](https://erroneo.us/security/cve/CVE-2024-44309/index.md) Apple Multiple Products: Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability (due 2024-12-12; ransomware: Unknown) - 2024-11-21 [CVE-2024-44308](https://erroneo.us/security/cve/CVE-2024-44308/index.md) Apple Multiple Products: Apple Multiple Products Code Execution Vulnerability (due 2024-12-12; ransomware: Unknown) - 2024-03-06 [CVE-2024-23296](https://erroneo.us/security/cve/CVE-2024-23296/index.md) Apple Multiple Products: Apple Multiple Products Memory Corruption Vulnerability (due 2024-03-27; ransomware: Unknown) - 2024-03-06 [CVE-2024-23225](https://erroneo.us/security/cve/CVE-2024-23225/index.md) Apple Multiple Products: Apple Multiple Products Memory Corruption Vulnerability (due 2024-03-27; ransomware: Unknown) - 2024-01-31 [CVE-2022-48618](https://erroneo.us/security/cve/CVE-2022-48618/index.md) Apple Multiple Products: Apple Multiple Products Memory Corruption Vulnerability (due 2024-02-21; ransomware: Unknown) - 2024-01-23 [CVE-2024-23222](https://erroneo.us/security/cve/CVE-2024-23222/index.md) Apple Multiple Products: Apple Multiple Products WebKit Type Confusion Vulnerability (due 2024-02-13; ransomware: Unknown) - 2024-01-08 [CVE-2023-41990](https://erroneo.us/security/cve/CVE-2023-41990/index.md) Apple Multiple Products: Apple Multiple Products Code Execution Vulnerability (due 2024-01-29; ransomware: Unknown) - 2023-12-04 [CVE-2023-42917](https://erroneo.us/security/cve/CVE-2023-42917/index.md) Apple Multiple Products: Apple Multiple Products WebKit Memory Corruption Vulnerability (due 2023-12-25; ransomware: Unknown) - 2023-12-04 [CVE-2023-42916](https://erroneo.us/security/cve/CVE-2023-42916/index.md) Apple Multiple Products: Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability (due 2023-12-25; ransomware: Unknown) - 2023-10-05 [CVE-2023-42824](https://erroneo.us/security/cve/CVE-2023-42824/index.md) Apple iOS and iPadOS: Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability (due 2023-10-26; ransomware: Unknown) --- Source page: https://erroneo.us/security/vendor/apple/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt