Apple product
Several products Alert ← All Apple products
No CISA KEV deadline is open. CISA last added a Several products CVE on 29 Sep.
Tracked since 12 Feb · latest article Fri 9 Oct · RSS
CVE Product Added Due · federal deadline
Deadlines passed
CVE-2026-86950 Multiple Products 29 Sep 13 articles CVE-2025-43529 Multiple Products 15 Dec 2025 7 articles CVE-2022-48503 Multiple Products 20 Oct 2025 2 articles CVE-2025-43200 not in CyberSIXT coverage Multiple Products 16 Jun 2025 44 more listed entries CVE-2025-31200 Multiple Products 17 Apr 2025 1 article CVE-2025-31201 not in CyberSIXT coverage Multiple Products 17 Apr 2025 CVE-2025-24201 Multiple Products 13 Mar 2025 1 article CVE-2025-24085 not in CyberSIXT coverage Multiple Products 29 Jan 2025 CVE-2024-44308 not in CyberSIXT coverage Multiple Products 21 Nov 2024 CVE-2024-44309 not in CyberSIXT coverage Multiple Products 21 Nov 2024 CVE-2024-23225 not in CyberSIXT coverage Multiple Products 6 Mar 2024 CVE-2024-23296 Multiple Products 6 Mar 2024 1 article CVE-2022-48618 not in CyberSIXT coverage Multiple Products 31 Jan 2024 CVE-2024-23222 Multiple Products 23 Jan 2024 5 articles CVE-2023-41990 not in CyberSIXT coverage Multiple Products 8 Jan 2024 CVE-2023-42916 not in CyberSIXT coverage Multiple Products 4 Dec 2023 CVE-2023-42917 not in CyberSIXT coverage Multiple Products 4 Dec 2023 CVE-2023-41991 not in CyberSIXT coverage Multiple Products 25 Sep 2023 CVE-2023-41992 not in CyberSIXT coverage Multiple Products 25 Sep 2023 CVE-2023-41993 not in CyberSIXT coverage Multiple Products 25 Sep 2023 CVE-2023-38606 Multiple Products 26 Jul 2023 3 articles CVE-2023-37450 not in CyberSIXT coverage Multiple Products 13 Jul 2023 CVE-2023-32434 Multiple Products 23 Jun 2023 3 articles CVE-2023-32435 not in CyberSIXT coverage Multiple Products 23 Jun 2023 CVE-2023-32439 not in CyberSIXT coverage Multiple Products 23 Jun 2023 CVE-2023-28204 not in CyberSIXT coverage Multiple Products 22 May 2023 CVE-2023-32373 not in CyberSIXT coverage Multiple Products 22 May 2023 CVE-2023-32409 not in CyberSIXT coverage Multiple Products 22 May 2023 CVE-2023-28205 not in CyberSIXT coverage Multiple Products 10 Apr 2023 CVE-2023-23529 not in CyberSIXT coverage Multiple Products 14 Feb 2023 CVE-2018-4344 not in CyberSIXT coverage Multiple Products 27 Jun 2022 CVE-2019-8605 not in CyberSIXT coverage Multiple Products 27 Jun 2022 CVE-2020-3837 not in CyberSIXT coverage Multiple Products 27 Jun 2022 CVE-2020-9907 not in CyberSIXT coverage Multiple Products 27 Jun 2022 CVE-2019-7286 not in CyberSIXT coverage Multiple Products 23 May 2022 CVE-2021-30883 not in CyberSIXT coverage Multiple Products 23 May 2022 CVE-2019-8506 not in CyberSIXT coverage Multiple Products 4 May 2022 CVE-2021-1789 not in CyberSIXT coverage Multiple Products 4 May 2022 CVE-2021-1782 not in CyberSIXT coverage Multiple Products 3 Nov 2021 CVE-2021-30661 not in CyberSIXT coverage Multiple Products 3 Nov 2021 CVE-2021-30663 not in CyberSIXT coverage Multiple Products 3 Nov 2021 CVE-2021-30665 not in CyberSIXT coverage Multiple Products 3 Nov 2021 CVE-2021-30807 not in CyberSIXT coverage Multiple Products 3 Nov 2021 CVE-2021-30860 not in CyberSIXT coverage Multiple Products 3 Nov 2021 CVE-2020-27930 not in CyberSIXT coverage Multiple Products 3 Nov 2021 CVE-2020-27932 not in CyberSIXT coverage Multiple Products 3 Nov 2021 CVE-2020-27950 not in CyberSIXT coverage Multiple Products 3 Nov 2021 CVE-2020-9859 not in CyberSIXT coverage Multiple Products 3 Nov 2021 37 articles from 9 outlets since 12 Feb; the latest 17 days ago.
Several products: coverage over time 37 articles from 9 outlets. First report 12 Feb by SecurityOnline. Busiest week: 14 articles, week of 16 Mar. 0 in the last 7 days.
Apr Jun Aug 12 Jan Now 37 per week First report SecurityOnline · 12 Feb Added to CISA KEV · CVE-2026-86950 Multiple Products Several products: coverage over time 37 articles from 9 outlets. First report 12 Feb by SecurityOnline. Busiest week: 14 articles, week of 16 Mar. 0 in the last 7 days.
Mar May Jul Sep 12 Jan Now 37 per week First report SecurityOnline · 12 Feb Added to CISA KEV · CVE-2026-86950 Multiple Products Added to CISA KEV · CVE-2025-31277 Multiple Products
Show as table Several products: articles Published (UTC) Outlet Headline Fri 9 Oct · 17:01 UTC The Hacker News P7 DarkSword iOS Exploit Adds Stealthier Keychain and Crypto Theft Fri 27 Mar · 11:00 UTC SecurityWeek Coruna iOS Exploit Kit Likely an Update to Operation Triangulation Thu 26 Mar · 12:12 UTC The Hacker News Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in New Mass Attacks Thu 26 Mar · 08:22 UTC Securelist Coruna: the framework used in Operation Triangulation Sun 22 Mar · 15:13 UTC Security Affairs U.S. CISA adds Apple, Laravel Livewire and Craft CMS flaws to its Known Exploited Vulnerabilities catalog Sat 21 Mar · 09:11 UTC The Hacker News CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026 Fri 20 Mar · 16:55 UTC CISA CISA Adds Five Known Exploited Vulnerabilities to Catalog Fri 20 Mar · 16:24 UTC CISA CISA Adds CVE-2025-31277 to Known Exploited Vulnerabilities Catalogue Fri 20 Mar · 16:23 UTC CISA CISA Adds CVE-2025-43510 to Known Exploited Vulnerabilities Catalogue Fri 20 Mar · 16:23 UTC CISA CISA Adds CVE-2025-43520 to Known Exploited Vulnerabilities Catalogue Fri 20 Mar · 15:53 UTC CISA CISA Adds CVE-2025-31277 to Known Exploited Vulnerabilities Catalogue Fri 20 Mar · 15:53 UTC CISA CISA Adds CVE-2025-43520 to Known Exploited Vulnerabilities Catalogue Fri 20 Mar · 15:53 UTC CISA CISA Adds CVE-2025-43510 to Known Exploited Vulnerabilities Catalogue Thu 19 Mar · 15:04 UTC Security Affairs DarkSword emerges as powerful iOS exploit tool in global attacks Thu 19 Mar · 13:03 UTC Malwarebytes A DarkSword hangs over unpatched iPhones Thu 19 Mar · 09:59 UTC The Hacker News DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover Wed 18 Mar · 21:48 UTC Dark Reading DarkSword: iPhone Exploit Kit Serves Spies & Thieves Alike Wed 18 Mar · 15:41 UTC SecurityWeek ‘DarkSword’ iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendors Thu 12 Mar · 18:16 UTC Malwarebytes Apple patches Coruna exploit kit flaws for older iOS versions Thu 12 Mar · 15:41 UTC Security Affairs Apple issues emergency fixes for Coruna flaws in older iOS versions Thu 12 Mar · 15:11 UTC SecurityWeek Apple Updates Older iOS Versions to Patch Coruna Exploits Thu 12 Mar · 11:08 UTC The Hacker News Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit Fri 6 Mar · 20:11 UTC Ars Technica CISA orders patch after Coruna kit exploits three iOS CVEs Fri 6 Mar · 13:30 UTC SecurityWeek CISA Adds Coruna iOS Exploit Kit Flaws to the KEV List, 12 CVEs Fri 6 Mar · 09:57 UTC Security Affairs CISA Adds CVEs to KEV for Apple Rockwell and Hikvision Flaws Thu 5 Mar · 21:44 UTC CISA CVE-2021-30952: Apple Integer Overflow Could Allow Code Execution Thu 5 Mar · 21:44 UTC CISA CVE-2023-43000 Use-After-Free flaw hits Apple Safari on macOS iOS Thu 5 Mar · 21:25 UTC CISA Apple CVE-2021-30952 sees active exploitation across devices Thu 5 Mar · 21:24 UTC CISA Apple CVE-2023-43000 Use-After-Free Active Exploitation Patch Now Wed 4 Mar · 14:38 UTC The Hacker News Coruna iOS Exploit Kit uses 23 exploits including CVE-2024-23222 Mon 16 Feb · 14:45 UTC The Hacker News Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware Fri 13 Feb · 09:35 UTC Security Affairs U.S. CISA adds SolarWinds Web Help Desk, Notepad++, Microsoft Configuration Manager, and Apple devices flaws to its Known Exploited Vulnerabilities catalog Thu 12 Feb · 12:25 UTC Malwarebytes Apple patches zero-day flaw that could let attackers take control of devices Thu 12 Feb · 11:25 UTC Security Affairs Apple fixed first actively exploited zero-day in 2026 Thu 12 Feb · 08:01 UTC SecurityWeek Apple Patches iOS Zero-Day Exploited in ‘Extremely Sophisticated Attack’ Thu 12 Feb · 07:25 UTC The Hacker News Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Apple Devices Thu 12 Feb · 04:01 UTC SecurityOnline Apple Zero-Day (CVE-2026-20700) Exploited in the Wild
Who reported 9 outlets, last 12 months
11 8 6 5 3 1 3 9 Oct P7 DarkSword iOS Exploit Adds Stealthier Keychain and Crypto Theft The Hacker News 27 Mar Coruna iOS Exploit Kit Likely an Update to Operation Triangulation SecurityWeek 26 Mar Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in New Mass Attacks The Hacker News 26 Mar Coruna: the framework used in Operation Triangulation Securelist 22 Mar U.S. CISA adds Apple, Laravel Livewire and Craft CMS flaws to its Known Exploited Vulnerabilities catalog Security Affairs 21 Mar CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026 The Hacker News 20 Mar CISA Adds Five Known Exploited Vulnerabilities to Catalog CISA · official notice 20 Mar CISA Adds CVE-2025-31277 to Known Exploited Vulnerabilities Catalogue CISA · official notice 20 Mar CISA Adds CVE-2025-43510 to Known Exploited Vulnerabilities Catalogue CISA · official notice 20 Mar CISA Adds CVE-2025-43520 to Known Exploited Vulnerabilities Catalogue CISA · official notice
All CVEs in coverage 14 Exploited EPSS CVSS Newest CVE-2023-32434 Apple Multiple Products Integer Overflow Vulnerability CVSS Unrated Exploited 52% EPSS 3 articles CVE-2025-43529 Apple Multiple Products Use-After-Free WebKit Vulnerability CVSS Unrated Exploited 26% EPSS 7 articles CVE-2025-31200 Apple Multiple Products Memory Corruption Vulnerability CVSS 9.8 Critical Exploited 21% EPSS 1 article CVE-2024-23222 Apple Multiple Products WebKit Type Confusion Vulnerability CVSS Unrated Exploited 11% EPSS 5 articles CVE-2021-30952 Apple Multiple Products Integer Overflow or Wraparound Vulnerability CVSS Unrated Exploited 7.0% EPSS 5 articles CVE-2023-43000 Apple Multiple products Use-After-Free Vulnerability CVSS Unrated Exploited 4.0% EPSS 10 articles CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability CVSS 10.0 Critical Exploited 3.9% EPSS 1 article CVE-2022-48503 Apple Multiple Products Unspecified Vulnerability CVSS Unrated Exploited 3.2% EPSS 2 articles CVE-2023-38606 Apple Multiple Products Kernel Unspecified Vulnerability CVSS Unrated Exploited 2.9% EPSS 3 articles CVE-2026-20700 Apple Multiple Buffer Overflow Vulnerability CVSS Unrated Exploited 1.7% EPSS 10 articles CVE-2025-31277 Apple Multiple Products Buffer Overflow Vulnerability CVSS Unrated Exploited 1.7% EPSS 9 articles CVE-2024-23296 Apple Multiple Products Memory Corruption Vulnerability CVSS Unrated Exploited 1.4% EPSS 1 article 2 more CVEs CVE-2025-43520 Apple Multiple Products Classic Buffer Overflow Vulnerability CVSS Unrated Exploited 0.4% EPSS 7 articles CVE-2025-43510 Apple Multiple Products Improper Locking Vulnerability CVSS Unrated Exploited 0.4% EPSS 7 articles How these numbers are made CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.