apple
1,466 known vulnerabilities affecting apple products.
Products
macos 1342
iphone_os 402
ipados 306
visionos 178
watchos 160
tvos 158
safari 66
mac_os_x 4
container 2
swift-crypto 2
swiftnio 1
swiftnio_http\/2 1
swiftnio_ssh 1
swiftnio_ssl 1
servicetalk 1
xcode 1
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-11660 | Medium | 0.3% | 8.3 | Insufficient validation of untrusted input in New Tab Page in Google Chrome prio… | |
| CVE-2026-10890 | Medium | 0.3% | 8.8 | Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attack… | |
| CVE-2026-11688 | Medium | 0.3% | 8.8 | Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.103 all… | |
| CVE-2026-43823 | Medium | 0.3% | 7.5 | When initializing an RSA public key from DER or PEM bytes throws an error, the E… | |
| CVE-2026-47967 | Medium | 0.3% | 7.8 | Audition is affected by an out-of-bounds write vulnerability that could result i… | |
| CVE-2026-47968 | Medium | 0.3% | 7.8 | Audition is affected by an out-of-bounds write vulnerability that could result i… | |
| CVE-2026-48309 | Medium | 0.3% | 7.8 | Audition is affected by an out-of-bounds write vulnerability that could result i… | |
| CVE-2026-48311 | Medium | 0.3% | 7.8 | Bridge is affected by an out-of-bounds write vulnerability that could result in … | |
| CVE-2026-48341 | Medium | 0.3% | 7.8 | Bridge is affected by an out-of-bounds write vulnerability that could result in … | |
| CVE-2026-48343 | Medium | 0.3% | 7.8 | Bridge is affected by an out-of-bounds write vulnerability that could result in … | |
| CVE-2026-48365 | Medium | 0.3% | 7.8 | Audition is affected by an out-of-bounds write vulnerability that could result i… | |
| CVE-2026-48368 | Medium | 0.3% | 7.8 | Audition is affected by an out-of-bounds write vulnerability that could result i… | |
| CVE-2026-11100 | Medium | 0.3% | 9.6 | Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allo… | |
| CVE-2026-9901 | Medium | 0.3% | 7.5 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-9909 | Medium | 0.3% | 7.5 | Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remo… | |
| CVE-2026-9956 | Medium | 0.3% | 7.5 | Use after free in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a … | |
| CVE-2026-9983 | Medium | 0.3% | 8.8 | Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote… | |
| CVE-2026-86904 | Medium | 0.3% | 7.5 | A privacy issue was addressed with improved state management. This issue is fixe… | |
| CVE-2026-5874 | Medium | 0.3% | 9.6 | Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a re… | |
| CVE-2026-76191 | Medium | 0.3% | 8.2 | Animate is affected by an Improper Control of Generation of Code ('Code Injectio… | |
| CVE-2026-10007 | Medium | 0.3% | 8.8 | Use after free in SVG in Google Chrome prior to 148.0.7778.216 allowed a remote … | |
| CVE-2026-10015 | Medium | 0.3% | 8.8 | Integer overflow in WTF in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-10016 | Medium | 0.3% | 8.8 | Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote … | |
| CVE-2026-11630 | Medium | 0.3% | 8.8 | Use after free in File Input in Google Chrome prior to 149.0.7827.103 allowed a … | |
| CVE-2026-11638 | Medium | 0.3% | 9.6 | Use after free in Printing in Google Chrome prior to 149.0.7827.103 allowed a re… | |
| CVE-2026-11654 | Medium | 0.3% | 9.6 | Use after free in CameraCapture in Google Chrome on Mac prior to 149.0.7827.103 … | |
| CVE-2026-11657 | Medium | 0.3% | 8.8 | Use after free in Payments in Google Chrome on Mac prior to 149.0.7827.103 allow… | |
| CVE-2026-11664 | Medium | 0.3% | 8.8 | Use after free in Payments in Google Chrome prior to 149.0.7827.103 allowed a re… | |
| CVE-2026-21280 | Medium | 0.3% | 8.6 | Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Searc… | |
| CVE-2026-9999 | Medium | 0.2% | 8.8 | Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.777… | |
| CVE-2026-82006 | Medium | 0.2% | 7.8 | Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that… | |
| CVE-2026-11091 | Medium | 0.2% | 8.8 | Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 all… | |
| CVE-2026-21268 | Medium | 0.2% | 8.6 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input … | |
| CVE-2026-21271 | Medium | 0.2% | 8.6 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input … | |
| CVE-2026-21275 | Medium | 0.2% | 7.8 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of … | |
| CVE-2026-21276 | Medium | 0.2% | 7.8 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of … | |
| CVE-2026-65415 | Medium | 0.2% | 8.1 | A race condition was addressed with additional validation. This issue is fixed i… | |
| CVE-2026-9926 | Medium | 0.2% | 8.3 | Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a… | |
| CVE-2026-9891 | Medium | 0.2% | 9.0 | Use after free in Extensions in Google Chrome prior to 148.0.7778.216 allowed a … | |
| CVE-2026-43776 | Medium | 0.2% | 7.8 | A buffer overflow was addressed with improved bounds checking. This issue is fix… | |
| CVE-2026-11671 | Medium | 0.2% | 9.6 | Use after free in Navigation in Google Chrome prior to 149.0.7827.103 allowed a … | |
| CVE-2026-11673 | Medium | 0.2% | 8.8 | Use after free in InterestGroups in Google Chrome prior to 149.0.7827.103 allowe… | |
| CVE-2026-11674 | Medium | 0.2% | 8.8 | Use after free in Guest View in Google Chrome prior to 149.0.7827.103 allowed a … | |
| CVE-2026-9886 | Medium | 0.2% | 9.6 | Use after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a… | |
| CVE-2026-9961 | Medium | 0.2% | 8.8 | Use after free in SurfaceCapture in Google Chrome prior to 148.0.7778.216 allowe… | |
| CVE-2026-9965 | Medium | 0.2% | 8.8 | Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a … | |
| CVE-2026-9967 | Medium | 0.2% | 9.6 | Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a re… | |
| CVE-2026-11230 | Medium | 0.2% | 8.8 | Use after free in Extensions in Google Chrome prior to 149.0.7827.53 allowed a r… | |
| CVE-2026-11235 | Medium | 0.2% | 8.8 | Insufficient policy enforcement in Compositing in Google Chrome prior to 149.0.7… | |
| CVE-2026-11652 | Medium | 0.2% | 8.3 | Use after free in Extensions in Google Chrome prior to 149.0.7827.103 allowed a … |