apple security advisories
60 threat alerts tracking vulnerabilities and security advisories that affect apple products.
Vulnios monitors apple CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent apple security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2024-54465 — apple — macos
A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be able to elevate privileges.
criticalCVE-2024-54465Critical Vulnerability: CVE-2026-65414 — apple — ipados, iphone_os
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 2
criticalCVE-2026-65414Critical Vulnerability: CVE-2026-43798 — apple — swiftnio_ssh
A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulne
criticalCVE-2026-43798Critical Vulnerability: CVE-2026-64770 — apple — ipados, iphone_os
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, ma
criticalCVE-2026-64770Critical Vulnerability: CVE-2026-43822 — apple — ipados, iphone_os
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS
criticalCVE-2026-43822Critical Vulnerability: CVE-2026-43809 — apple — macos
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be abl
criticalCVE-2026-43809Critical Vulnerability: CVE-2026-43814 — apple — ipados, iphone_os
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected
criticalCVE-2026-43814Critical Vulnerability: CVE-2026-64729 — apple — ipados, iphone_os
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to c
criticalCVE-2026-64729Critical Vulnerability: CVE-2019-8703 — apple — iphone_os, mac_os_x
This issue was addressed with improved entitlements. This issue is fixed in watchOS 6, tvOS 13, macOS Catalina 10.15, iOS 13. An application may be able to gain elevated privileges.
criticalCVE-2019-8703Critical Vulnerability: CVE-2019-8643 — apple — mac_os_x
CVE-2019-8643: Arun Sharma of VMWare This issue is fixed in macOS Mojave 10.14. Description: A logic issue was addressed with improved state management..
criticalCVE-2019-8643Critical Vulnerability: CVE-2021-30820 — apple — ipados, iphone_os
A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8. A remote attacker may be able to cause arbitrary code execution.
criticalCVE-2021-30820Critical Vulnerability: CVE-2021-1834 — apple — mac_os_x, macos
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious app
criticalCVE-2021-1834Critical Vulnerability: CVE-2021-1882 — apple — ipados, iphone_os
A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An app
criticalCVE-2021-1882Critical Vulnerability: CVE-2021-30678 — apple — mac_os_x, macos
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A remote attacker may be able
criticalCVE-2021-30678Critical Vulnerability: CVE-2021-30655 — apple — mac_os_x, macos
An application may be able to execute arbitrary code with system privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. The issue was addressed with improved permiss
criticalCVE-2021-30655Critical Vulnerability: CVE-2021-30805 — apple — mac_os_x, macos
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application ma
criticalCVE-2021-30805Critical Vulnerability: CVE-2021-1770 — apple — ipados, iphone_os
A buffer overflow may result in arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A logic issue was addressed with improved state m
criticalCVE-2021-1770Critical Vulnerability: CVE-2021-1829 — apple — macos
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges.
criticalCVE-2021-1829Critical Vulnerability: CVE-2021-30690 — apple — mac_os_x
Multiple issues in apache were addressed by updating apache to version 2.4.46. This issue is fixed in Security Update 2021-004 Mojave. Multiple issues in apache.
criticalCVE-2021-30690Critical Vulnerability: CVE-2021-1864 — apple — ipados, iphone_os
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to exec
criticalCVE-2021-1864Critical Vulnerability: CVE-2021-30793 — apple — mac_os_x, macos
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to
criticalCVE-2021-30793Critical Vulnerability: CVE-2021-31009 — apple — ipados, iphone_os
Multiple issues were addressed by removing HDF5. This issue is fixed in iOS 15.2 and iPadOS 15.2, macOS Monterey 12.1. Multiple issues in HDF5.
criticalCVE-2021-31009Critical Vulnerability: CVE-2021-30925 — apple — ipados, iphone_os
The issue was addressed with improved permissions logic. This issue is fixed in watchOS 8, macOS Big Sur 11.6, iOS 15 and iPadOS 15. A malicious application may be able to bypass Privacy preferences.
criticalCVE-2021-30925Critical Vulnerability: CVE-2021-30856 — apple — macos
This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions. This issue is fixed in macOS Big Sur 11.3. A malicious unsandboxed app on a sys
criticalCVE-2021-30856Critical Vulnerability: CVE-2021-1796 — apple — ipad_os, iphone_os
An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution.
criticalCVE-2021-1796Critical Vulnerability: CVE-2021-1794 — apple — ipad_os, iphone_os
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution.
criticalCVE-2021-1794Critical Vulnerability: CVE-2021-1795 — apple — ipad_os, iphone_os
An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution.
criticalCVE-2021-1795Critical Vulnerability: CVE-2021-1818 — apple — ipad_os, iphone_os
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 1
criticalCVE-2021-1818Critical Vulnerability: CVE-2020-9866 — apple — mac_os_x
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. A buffer overflow m
criticalCVE-2020-9866Critical Vulnerability: CVE-2019-8547 — apple — iphone_os, mac_os_x
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-00
criticalCVE-2019-8547Critical Vulnerability: CVE-2019-8578 — apple — airport_base_station_firmware
A use after free issue was addressed with improved memory management. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker m
criticalCVE-2019-8578Critical Vulnerability: CVE-2019-8756 — apple — icloud, itunes
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS C
criticalCVE-2019-8756Critical Vulnerability: CVE-2019-8572 — apple — airport_base_station_firmware
A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacke
criticalCVE-2019-8572Critical Vulnerability: CVE-2019-8712 — apple — iphone_os, tvos
A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able to execute arbitrary code with system privileges.
criticalCVE-2019-8712Critical Vulnerability: CVE-2019-8749 — apple — icloud, itunes
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS C
criticalCVE-2019-8749Critical Vulnerability: CVE-2019-7288 — apple — iphone_os, mac_os_x
The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service
criticalCVE-2019-7288Critical Vulnerability: CVE-2019-8716 — apple — mac_os_x
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. An application may be able
criticalCVE-2019-8716Critical Vulnerability: CVE-2019-8746 — apple — icloud, itunes
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15
criticalCVE-2019-8746Critical Vulnerability: CVE-2019-8531 — apple — iphone_os, mac_os_x
A validation issue existed in Trust Anchor Management. This issue was addressed with improved validation. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra
criticalCVE-2019-8531Critical Vulnerability: CVE-2019-8581 — apple — airport_base_station_firmware
An out-of-bounds read was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may
criticalCVE-2019-8581Critical Vulnerability: CVE-2019-8767 — apple — mac_os_x
A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. Pro
criticalCVE-2019-8767Critical Vulnerability: CVE-2020-9920 — apple — ipados, iphone_os
A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A malicious mail server may overwrite arbitrary ma
criticalCVE-2020-9920Critical Vulnerability: CVE-2020-9906 — apple — ipados, iphone_os
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A remote attacker may be able to cause u
criticalCVE-2020-9906Critical Vulnerability: CVE-2020-9868 — apple — ipados, iphone_os
A certificate validation issue existed when processing administrator added certificates. This issue was addressed with improved certificate validation. This issue is fixed in iOS 13.6 and iPadOS 13.6,
criticalCVE-2020-9868Critical Vulnerability: CVE-2020-9898 — apple — ipados, iphone_os
This issue was addressed with improved entitlements. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A sandboxed process may be able to circumvent sandbox restrictions.
criticalCVE-2020-9898Critical Vulnerability: CVE-2018-4296 — apple — mac_os_x
This issue is fixed in macOS Mojave 10.14. A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks.
criticalCVE-2018-4296Critical Vulnerability: CVE-2020-9864 — apple — mac_os_x
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.6. An application may be able to execute arbitrary code with kernel privileges.
criticalCVE-2020-9864Critical Vulnerability: CVE-2020-9895 — apple — icloud, itunes
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for
criticalCVE-2020-9895Critical Vulnerability: CVE-2020-9918 — apple — mac_os_x, tvos
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A remote attacker may be able to cause unexpected system
criticalCVE-2020-9918Critical Vulnerability: CVE-2020-9850 — apple — icloud, itunes
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2,
criticalCVE-2020-9850Critical Vulnerability: CVE-2020-9838 — apple — ipados, iphone_os
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5. A remote attacker may be able to cause arbitrary code execution.
criticalCVE-2020-9838Critical Vulnerability: CVE-2019-6203 — apple — iphone_os, mac_os_x
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept netw
criticalCVE-2019-6203Critical Vulnerability: CVE-2020-9769 — apple — mac_os_x
Multiple issues were addressed by updating to version 8.1.1850. This issue is fixed in macOS Catalina 10.15.4. Multiple issues in Vim.
criticalCVE-2020-9769Critical Vulnerability: CVE-2020-3910 — apple — icloud, itunes
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for W
criticalCVE-2020-3910Critical Vulnerability: CVE-2020-3911 — apple — icloud, itunes
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for W
criticalCVE-2020-3911Critical Vulnerability: CVE-2020-3849 — apple — mac_os_x
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbi
criticalCVE-2020-3849Critical Vulnerability: CVE-2020-3909 — apple, oracle — icloud, itunes
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for W
criticalCVE-2020-3909Critical Vulnerability: CVE-2020-3847 — apple — mac_os_x
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to leak memory.
criticalCVE-2020-3847Critical Vulnerability: CVE-2020-3848 — apple — mac_os_x
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbi
criticalCVE-2020-3848Critical Vulnerability: CVE-2020-3850 — apple — mac_os_x
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbi
criticalCVE-2020-3850
Showing the 60 most recent. Older alerts are archived but still reachable via search and the main feed.
Track apple exposure across your environment
Vulnios automatically cross-references your asset inventory against new apple CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan