News stories · 30d
36
Advisories · 30d
9
Added to KEV · 90d
2
Actively exploited (CISA KEV)
| Added | CVE | Product | Vulnerability | Ransomware |
|---|---|---|---|---|
| 2026-09-29 | CVE-2026-86950 | Multiple Products | Apple Multiple Products Out-of-Bounds Write Vulnerability | |
| 2026-08-18 | CVE-2026-65400 | macOS | Apple macOS Improper Authentication Vulnerability | |
| 2026-07-13 | CVE-2008-4128 | IOS | Cisco IOS Cross-Site Request Forgery Vulnerability | |
| 2026-03-20 | CVE-2025-43510 | Multiple Products | Apple Multiple Products Improper Locking Vulnerability | |
| 2026-03-20 | CVE-2025-43520 | Multiple Products | Apple Multiple Products Classic Buffer Overflow Vulnerability | |
| 2026-03-20 | CVE-2025-31277 | Multiple Products | Apple Multiple Products Buffer Overflow Vulnerability | |
| 2026-03-05 | CVE-2023-43000 | Multiple Products | Apple Multiple products Use-After-Free Vulnerability | |
| 2026-03-05 | CVE-2021-30952 | Multiple Products | Apple Multiple Products Integer Overflow or Wraparound Vulnerability | |
| 2026-03-05 | CVE-2023-41974 | iOS and iPadOS | Apple iOS and iPadOS Use-After-Free Vulnerability | |
| 2026-02-12 | CVE-2026-20700 | Multiple Products | Apple Multiple Buffer Overflow Vulnerability | |
| 2025-12-15 | CVE-2025-43529 | Multiple Products | Apple Multiple Products Use-After-Free WebKit Vulnerability | |
| 2025-10-20 | CVE-2022-48503 | Multiple Products | Apple Multiple Products Unspecified Vulnerability | |
| 2025-09-29 | CVE-2025-20352 | IOS and IOS XE | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | |
| 2025-08-21 | CVE-2025-43300 | iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | |
| 2025-06-16 | CVE-2025-43200 | Multiple Products | Apple Multiple Products Unspecified Vulnerability | |
| 2025-04-17 | CVE-2025-31201 | Multiple Products | Apple Multiple Products Arbitrary Read and Write Vulnerability | |
| 2025-04-17 | CVE-2025-31200 | Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | |
| 2025-03-13 | CVE-2025-24201 | Multiple Products | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability | |
| 2025-02-12 | CVE-2025-24200 | iOS and iPadOS | Apple iOS and iPadOS Incorrect Authorization Vulnerability | |
| 2025-01-29 | CVE-2025-24085 | Multiple Products | Apple Multiple Products Use-After-Free Vulnerability | |
| 2024-11-21 | CVE-2024-44309 | Multiple Products | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability | |
| 2024-11-21 | CVE-2024-44308 | Multiple Products | Apple Multiple Products Code Execution Vulnerability | |
| 2024-03-06 | CVE-2024-23225 | Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | |
| 2024-03-06 | CVE-2024-23296 | Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | |
| 2024-01-31 | CVE-2022-48618 | Multiple Products | Apple Multiple Products Memory Corruption Vulnerability |
CVEs in the news
Timeline (last 30 days)
- Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks — Help Net Security, 2026-10-19
- The Dacls RAT ...now on macOS! — Objective-See, 2026-10-18
- Sniffing Authentication References on macOS — Objective-See, 2026-10-18
- Pass the AppleJeus — Objective-See, 2026-10-18
- Writing a File Monitor with Apple's Endpoint Security Framework — Objective-See, 2026-10-18
- Writing a Process Monitor with Apple's Endpoint Security Framework — Objective-See, 2026-10-18
- iOS 27.0.1 Untethered Jailbreak Demonstrated on iPhone 18 Pro — Cybersecurity News, 2026-10-16
- Product showcase: GuardOS checks QR links, scans for data breaches, and filters Safari content — Help Net Security, 2026-10-15
- CVE-2026-0315 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS (Severity: MEDIUM) — Palo Alto Networks Advisories, 2026-10-14
- Coruna and DarkSword Exploit Kits Can Fully Compromise iPhones From a Single Web Visit — Cybersecurity News, 2026-10-14
- ICMacOS Malware Evolves to Steal Credentials and Provide Persistent Remote Mac Access — Cybersecurity News, 2026-10-13
- Introducing macOS Mirage: Next-Generation Apple Silicon Dynamic Analysis and Sigma Detections — VirusTotal Blog, 2026-10-13
- P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands — The Hacker News, 2026-10-11
- Podcast: Leak Show Cops Can Break into Locked iPhones — 404 Media, 2026-10-08
- Microsoft, Adobe, Apple, and Foxit vulnerabilities — 0dayfans, 2026-10-07
- Apple’s Verified Photography System — Schneier on Security, 2026-10-07
- SEC Consult Research 20261001 :: Arbitrary Email sender spoofing in Apple iCloud mail — Full Disclosure, 2026-10-06
- Possible Vulnerability in Apple’s Automatic Reboot — Schneier on Security, 2026-10-06
- RemoveMacAI turns off Apple Intelligence on macOS 27 and deletes its models — Help Net Security, 2026-10-05
- Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access — The Hacker News +1 sources, 2026-10-05
- Apple changes full-disk access permissions to curb abuse from AI agents — Ars Technica, 2026-10-02
- Cisco IOS XE Software Security Hardening Release: August 2026 — Cisco Security Advisories, 2026-10-02
- Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents — TechCrunch Security, 2026-10-02
- CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer — Infosecurity Magazine +2 sources, 2026-10-01
- Cops Can Bypass iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video Claims — 404 Media, 2026-10-01
- Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950 — Security Affairs, 2026-10-01
- Mobile malware warning from Ukrainian researchers includes iPhone exploit kit — The Record, 2026-09-30
- U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog — Security Affairs, 2026-09-30
- Signal adds encypted local backup support to iOS, desktop apps — BleepingComputer, 2026-09-29
- Still running iOS 26? Update your iPhones, iPads, and Macs for this urgent security fix — TechCrunch Security, 2026-09-29
- Update your iPhone, iPad, or Mac: Flaw could run attackers’ code — Malwarebytes Labs, 2026-09-29
- Fake iPhone Duo preorder scam triggers DarkSword attack — Malwarebytes Labs, 2026-09-29
- Apple patches CoreGraphics zero-day flaw exploited in attacks — BleepingComputer +6 sources, 2026-09-29
- APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1 — Full Disclosure, 2026-09-29
- APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1 — Full Disclosure, 2026-09-29
- APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1 — Full Disclosure, 2026-09-29
- Apple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950), (Mon, Sep 28th) — SANS ISC, 2026-09-28
- iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later — Apple Security Updates, 2026-09-28
- macOS Tahoe — Apple Security Updates, 2026-09-28
- macOS Sequoia — Apple Security Updates, 2026-09-28
- Decades-old file security flaws found in Android, Linux, macOS, and Windows — The Register, 2026-09-24
- A new version of the MacSync macOS stealer targets crypto enthusiasts and developers — Securelist (Kaspersky), 2026-09-24
- One Tap Too Far: Using Shortcuts to Bypass Chrome for iOS Call Prompts — 0dayfans, 2026-09-23
- British regulator takes a hard look at Pornhub's Apple-powered age checks — The Register, 2026-09-23
- Apple macOS CoreWLAN information disclosure vulnerability — 0dayfans, 2026-09-23