Apple vulnerabilities153 known to be exploited.
Apple has 12,782 published vulnerabilities across 239 products in our catalogue. 153 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Mac OS X, with 5,568. If you run Apple software, patch the exploited flaws first.
The most recent Apple flaw added to the known-exploited list is CVE-2020-9715, on 13 April 2026. We keep watching the known-exploited list.
Which Apple vulnerabilities are being exploited?
153 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.8Adobe Acrobat Use-After-Free Vulnerability
Adobe Acrobat contains a use-after-free vulnerability that allows for code execution
- 7.8Apple Multiple Products Integer Overflow or Wraparound Vulnerability
Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.
- 7.8Apple iOS and iPadOS Use-After-Free Vulnerability
Apple iOS and iPadOS contain a use-after-free vulnerability.
- 8.8Apple Multiple Products Unspecified Vulnerability
Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution.
- 8.8Google Chromium V8 Type Confusion Vulnerability
Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.
- 8.0Git Link Following Vulnerability
Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.
- 8.8Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.
- 8.8Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
Google Chromium contains an improper input validation vulnerability in ANGLE and GPU.
Which Apple flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 92%CVE-2008-0226High
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2)...
- 90%CVE-2002-0656High
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.
- 85%CVE-2003-0201Critical
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
- 84%CVE-2007-2175High
Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to the toQTPointer method in...
- 81%CVE-2004-2687Critical
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server...
- 78%CVE-2003-0466Critical
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause...
- 70%CVE-2007-3798Critical
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
- 69%CVE-2005-0043High
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.
- 69%CVE-2003-0050High
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters.
- 60%CVE-2003-0694Critical
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
All Apple products we track.
121 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Mac OS Xmac_os_x5,568 vulnerabilities138 versions
- macOSmacos4,662 vulnerabilities143 versions
- iOSiphone_os4,141 vulnerabilities262 versions
- tvOStvos1,912 vulnerabilities122 versions
- iPadOSipados1,667 vulnerabilities125 versions
- watchOSwatchos1,666 vulnerabilities102 versions
- Safarisafari1,572 vulnerabilities219 versions
- Itunesitunes922 vulnerabilities185 versions
- Mac OS X Servermac_os_x_server817 vulnerabilities78 versions
- Icloudicloud449 vulnerabilities50 versions
- Visionosvisionos289 vulnerabilities21 versions
- Webkitwebkit258 vulnerabilities107 versions
- Quicktimequicktime250 vulnerabilities77 versions
- Ipad OSipad_os91 vulnerabilities46 versions
- Xcodexcode91 vulnerabilities99 versions
- Ipod Touchipod_touch58 vulnerabilities8 versions
- Cupscups56 vulnerabilities109 versions
- Apple Tvapple_tv36 vulnerabilities73 versions
- Darwin Streaming Serverdarwin_streaming_server27 vulnerabilities8 versions
- Iphoneiphone23 vulnerabilities16 versions
- Quicktime Streaming Serverquicktime_streaming_server16 vulnerabilities1 version
- Airport Base Station Firmwareairport_base_station_firmware11 vulnerabilities20 versions
- OS X Serveros_x_server11 vulnerabilities16 versions
- Swiftnioswiftnio10 vulnerabilities78 versions
This directory lists the 121 Apple products with at least one tracked version, of 239 in our catalogue.
Running Apple? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Adobe Acrobat contains a use-after-free vulnerability that allows for code execution
- Matched to
- Apple on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 12,782 published vulnerabilities across 239 products and 2,855 versions from Apple. The most recent Apple flaw added to the known-exploited list is CVE-2020-9715, on 13 April 2026.
153 Apple vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2020-9715, CVE-2021-30952 and CVE-2023-41974. The full list is on this page.
Mac OS X, with 5,568 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a EdgeProtect account and track the Apple products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.