CVE Tools
Track your stack

Apple

8,878 CVEs tracked since 1999. Since May 2021, 74 of them reached CISA KEV.

Apple CVEs per month

May 2021 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Apple CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2021-0560
2021-0630
2021-0730
2021-081548
2021-092188
2021-10471
2021-112 or fewer
2021-12311
2022-01120
2022-02130
2022-03822
2022-04100
2022-05922
2022-0680
2022-0771
2022-08152
2022-09721
2022-1040
2022-11951
2022-12511
2023-013 or fewer
2023-02561
2023-03no snapshot
2023-0492
2023-05710
2023-06737
2023-07572
2023-08191
2023-091237
2023-10412
2023-114 or fewer
2023-12350
2024-01843
2024-02270
2024-03912
2024-0460
2024-05300
2024-06410
2024-07800
2024-084 or fewer
2024-09910
2024-10840
2024-1172
2024-12620
2025-011021
2025-0241
2025-031591
2025-04262
2025-05790
2025-064 or fewer
2025-07853
2025-0891
2025-09830
2025-1060
2025-111131
2025-12684
2026-01140
2026-02751
2026-03890
2026-04160
2026-051000
2026-06520
2026-071670
2026-08441
2026-092471
2026-103750
2026-110

Products

The products that kept showing up in Apple's monthly top three, with their CVEs summed over those months.

  1. macOS3,36955 months
  2. iPadOS1,37837 months
  3. iPhone OS1,33837 months
  4. iOS and iPadOS1,26830 months
  5. Visionos1743 months
  6. Mac OS X594 months
  7. IOS103 months
  8. Apple M132 months
  9. Swiftnio Http\/231 month
  10. Xcode32 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Apple.

  1. CVE-2026-112605This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.3.3
  2. CVE-2026-112602An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data.3.3
  3. CVE-2026-113957An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the ...5.6
  4. CVE-2026-86983A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This vulnerability is addressed in swift-crypto versio...5.9
  5. CVE-2026-86925An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive u...5.5
  6. CVE-2026-84627A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7....7.8
  7. CVE-2026-113945An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination.5.5
  8. CVE-2026-65327A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may be able to elevate their privileges.8.4
  9. CVE-2026-112529An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected sy...7.5
  10. CVE-2026-86972A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, ...7.8
  11. CVE-2026-112483A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts o...5.5
  12. CVE-2026-113912An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, m...7.1
  13. CVE-2026-112495An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected sy...7.1
  14. CVE-2026-86964A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An ...7.5
  15. CVE-2026-113904A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, ...4.3

The record

Peak rank
#1 in Sep 2021
Busiest month shown
Oct 2026, 375 CVEs
Months with a KEV entry
32 since May 2021
Monthly snapshots
256 since 1999
Apple's full record, month by month