apple security advisories
60 threat alerts tracking vulnerabilities and security advisories that affect apple products.
Vulnios monitors apple CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent apple security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2020-9866 — apple — mac_os_x
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. A buffer overflow m
criticalCVE-2020-9866Critical Vulnerability: CVE-2019-8547 — apple — iphone_os, mac_os_x
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-00
criticalCVE-2019-8547Critical Vulnerability: CVE-2019-8578 — apple — airport_base_station_firmware
A use after free issue was addressed with improved memory management. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker m
criticalCVE-2019-8578Critical Vulnerability: CVE-2019-8756 — apple — icloud, itunes
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS C
criticalCVE-2019-8756Critical Vulnerability: CVE-2019-8572 — apple — airport_base_station_firmware
A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacke
criticalCVE-2019-8572Critical Vulnerability: CVE-2019-8712 — apple — iphone_os, tvos
A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able to execute arbitrary code with system privileges.
criticalCVE-2019-8712Critical Vulnerability: CVE-2019-8749 — apple — icloud, itunes
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS C
criticalCVE-2019-8749Critical Vulnerability: CVE-2019-7288 — apple — iphone_os, mac_os_x
The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service
criticalCVE-2019-7288Critical Vulnerability: CVE-2019-8716 — apple — mac_os_x
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. An application may be able
criticalCVE-2019-8716Critical Vulnerability: CVE-2019-8746 — apple — icloud, itunes
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15
criticalCVE-2019-8746Critical Vulnerability: CVE-2019-8531 — apple — iphone_os, mac_os_x
A validation issue existed in Trust Anchor Management. This issue was addressed with improved validation. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra
criticalCVE-2019-8531Critical Vulnerability: CVE-2019-8581 — apple — airport_base_station_firmware
An out-of-bounds read was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may
criticalCVE-2019-8581Critical Vulnerability: CVE-2019-8767 — apple — mac_os_x
A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. Pro
criticalCVE-2019-8767Critical Vulnerability: CVE-2020-9920 — apple — ipados, iphone_os
A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A malicious mail server may overwrite arbitrary ma
criticalCVE-2020-9920Critical Vulnerability: CVE-2020-9906 — apple — ipados, iphone_os
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A remote attacker may be able to cause u
criticalCVE-2020-9906Critical Vulnerability: CVE-2020-9868 — apple — ipados, iphone_os
A certificate validation issue existed when processing administrator added certificates. This issue was addressed with improved certificate validation. This issue is fixed in iOS 13.6 and iPadOS 13.6,
criticalCVE-2020-9868Critical Vulnerability: CVE-2020-9898 — apple — ipados, iphone_os
This issue was addressed with improved entitlements. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A sandboxed process may be able to circumvent sandbox restrictions.
criticalCVE-2020-9898Critical Vulnerability: CVE-2018-4296 — apple — mac_os_x
This issue is fixed in macOS Mojave 10.14. A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks.
criticalCVE-2018-4296Critical Vulnerability: CVE-2020-9864 — apple — mac_os_x
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.6. An application may be able to execute arbitrary code with kernel privileges.
criticalCVE-2020-9864Critical Vulnerability: CVE-2020-9895 — apple — icloud, itunes
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for
criticalCVE-2020-9895Critical Vulnerability: CVE-2020-9918 — apple — mac_os_x, tvos
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A remote attacker may be able to cause unexpected system
criticalCVE-2020-9918Critical Vulnerability: CVE-2020-9850 — apple — icloud, itunes
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2,
criticalCVE-2020-9850Critical Vulnerability: CVE-2020-9838 — apple — ipados, iphone_os
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5. A remote attacker may be able to cause arbitrary code execution.
criticalCVE-2020-9838Critical Vulnerability: CVE-2019-6203 — apple — iphone_os, mac_os_x
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept netw
criticalCVE-2019-6203Critical Vulnerability: CVE-2020-9769 — apple — mac_os_x
Multiple issues were addressed by updating to version 8.1.1850. This issue is fixed in macOS Catalina 10.15.4. Multiple issues in Vim.
criticalCVE-2020-9769Critical Vulnerability: CVE-2020-3910 — apple — icloud, itunes
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for W
criticalCVE-2020-3910Critical Vulnerability: CVE-2020-3911 — apple — icloud, itunes
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for W
criticalCVE-2020-3911Critical Vulnerability: CVE-2020-3849 — apple — mac_os_x
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbi
criticalCVE-2020-3849Critical Vulnerability: CVE-2020-3909 — apple, oracle — icloud, itunes
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for W
criticalCVE-2020-3909Critical Vulnerability: CVE-2020-3847 — apple — mac_os_x
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to leak memory.
criticalCVE-2020-3847Critical Vulnerability: CVE-2020-3848 — apple — mac_os_x
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbi
criticalCVE-2020-3848Critical Vulnerability: CVE-2020-3850 — apple — mac_os_x
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbi
criticalCVE-2020-3850Critical Vulnerability: CVE-2019-8779 — apple — ipados, iphone_os
A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS 13.1.1 and iPadOS 13.1.1. Third party app
criticalCVE-2019-8779Critical Vulnerability: CVE-2019-8750 — apple — icloud, watchos
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Multiple issues in libxslt.
criticalCVE-2019-8750Critical Vulnerability: CVE-2019-8849 — apple — swiftnio_ssl
The issue was addressed by signaling that an executable stack is not required. This issue is fixed in SwiftNIO SSL 2.4.1. A SwiftNIO application using TLS may be able to execute arbitrary code.
criticalCVE-2019-8849Critical Vulnerability: CVE-2019-8660 — apple — iphone_os, mac_os_x
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause unexpected
criticalCVE-2019-8660Critical Vulnerability: CVE-2019-8648 — apple — iphone_os, mac_os_x
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary
criticalCVE-2019-8648Critical Vulnerability: CVE-2019-8613 — apple — iphone_os, tvos
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A remote attacker may be able to cause arbitrary code execution.
criticalCVE-2019-8613Critical Vulnerability: CVE-2019-8562 — apple — itunes, safari
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows. A sandboxed process may be able to circumvent sand
criticalCVE-2019-8562Critical Vulnerability: CVE-2019-8641 — apple — iphone_os, mac_os_x
An out-of-bounds read was addressed with improved input validation.
criticalCVE-2019-8641Critical Vulnerability: CVE-2019-8647 — apple — iphone_os, tvos
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.
criticalCVE-2019-8647Critical Vulnerability: CVE-2019-8600 — apple — icloud, itunes
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7
criticalCVE-2019-8600Critical Vulnerability: CVE-2019-8527 — apple — iphone_os, mac_os_x
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A remote attacker may be able to cause unexpected system t
criticalCVE-2019-8527Critical Vulnerability: CVE-2019-8662 — apple — iphone_os, mac_os_x
This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application dese
criticalCVE-2019-8662Critical Vulnerability: CVE-2019-7290 — apple — shortcuts
An access issue was addressed with additional sandbox restrictions. This issue is fixed in Shortcuts 2.1.3 for iOS. A sandboxed process may be able to circumvent sandbox restrictions.
criticalCVE-2019-7290Critical Vulnerability: CVE-2019-8617 — apple — iphone_os
An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 12.3. A sandboxed process may be able to circumvent sandbox restrictions.
criticalCVE-2019-8617Critical Vulnerability: CVE-2019-8661 — apple — mac_os_x
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to cause arbitrary code execution.
criticalCVE-2019-8661Critical Vulnerability: CVE-2018-4332 — apple — iphone_os, mac_os_x
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
criticalCVE-2018-4332Critical Vulnerability: CVE-2018-4288 — apple — mac_os_x
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
criticalCVE-2018-4288Critical Vulnerability: CVE-2018-4268 — apple — mac_os_x
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
criticalCVE-2018-4268Critical Vulnerability: CVE-2018-4331 — apple — iphone_os, mac_os_x
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
criticalCVE-2018-4331Critical Vulnerability: CVE-2018-4295 — apple — mac_os_x
An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.
criticalCVE-2018-4295Critical Vulnerability: CVE-2018-4259 — apple — mac_os_x
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
criticalCVE-2018-4259Critical Vulnerability: CVE-2018-4367 — apple — iphone_os
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.
criticalCVE-2018-4367Critical Vulnerability: CVE-2018-4287 — apple — mac_os_x
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
criticalCVE-2018-4287Critical Vulnerability: CVE-2018-4291 — apple — mac_os_x
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
criticalCVE-2018-4291Critical Vulnerability: CVE-2018-4286 — apple — mac_os_x
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
criticalCVE-2018-4286Critical Vulnerability: CVE-2018-4353 — apple — mac_os_x
A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.
criticalCVE-2018-4353Critical Vulnerability: CVE-2018-4310 — apple — iphone_os, mac_os_x
An access issue was addressed with additional sandbox restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14.
criticalCVE-2018-4310Critical Vulnerability: CVE-2019-6235 — apple — itunes, iphone_os
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process ma
criticalCVE-2019-6235
Showing the 60 most recent. Older alerts are archived but still reachable via search and the main feed.
Track apple exposure across your environment
Vulnios automatically cross-references your asset inventory against new apple CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan