apple
1,466 known vulnerabilities affecting apple products.
Products
macos 1342
iphone_os 402
ipados 306
visionos 178
watchos 160
tvos 158
safari 66
mac_os_x 4
container 2
swift-crypto 2
swiftnio 1
swiftnio_http\/2 1
swiftnio_ssh 1
swiftnio_ssl 1
servicetalk 1
xcode 1
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-28938 | Medium | 0.3% | 7.5 | A privacy issue was addressed by moving sensitive data. This issue is fixed in i… | |
| CVE-2026-11049 | Medium | 0.3% | 8.8 | Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allow… | |
| CVE-2026-11050 | Medium | 0.3% | 8.8 | Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote at… | |
| CVE-2026-11059 | Medium | 0.3% | 8.8 | Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-11077 | Medium | 0.3% | 8.8 | Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attack… | |
| CVE-2026-11086 | Medium | 0.3% | 8.8 | Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 all… | |
| CVE-2026-11125 | Medium | 0.3% | 8.8 | Use after free in Compositing in Google Chrome prior to 149.0.7827.53 allowed a … | |
| CVE-2026-11130 | Medium | 0.3% | 8.8 | Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-11136 | Medium | 0.3% | 8.8 | Use after free in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remot… | |
| CVE-2026-11164 | Medium | 0.3% | 8.8 | Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-11171 | Medium | 0.3% | 8.8 | Integer overflow in Blink in Google Chrome prior to 149.0.7827.53 allowed a remo… | |
| CVE-2026-11173 | Medium | 0.3% | 8.8 | Out of bounds write in V8 in Google Chrome prior to 149.0.7827.53 allowed a remo… | |
| CVE-2026-11211 | Medium | 0.3% | 8.8 | Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote … | |
| CVE-2026-11262 | Medium | 0.3% | 8.8 | Use after free in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a rem… | |
| CVE-2026-86895 | Medium | 0.3% | 7.5 | An information disclosure issue was addressed with improved state management. Th… | |
| CVE-2026-9957 | Medium | 0.3% | 8.8 | Use after free in PDF in Google Chrome prior to 148.0.7778.216 allowed a remote … | |
| CVE-2026-9968 | Medium | 0.3% | 8.8 | Integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote… | |
| CVE-2026-11030 | Medium | 0.3% | 8.8 | Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remo… | |
| CVE-2026-11037 | Medium | 0.3% | 9.6 | Out of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a … | |
| CVE-2026-9963 | Medium | 0.3% | 7.5 | Uninitialized Use in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed… | |
| CVE-2026-17856 | Medium | 0.3% | 9.6 | Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7… | |
| CVE-2026-17865 | Medium | 0.3% | 9.6 | Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.79… | |
| CVE-2026-47911 | Medium | 0.3% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2024-44303 | Medium | 0.3% | 7.5 | The issue was addressed with improved checks. This issue is fixed in macOS Sequo… | |
| CVE-2026-10915 | Medium | 0.3% | 8.3 | Use after free in Core in Google Chrome on iOS prior to 149.0.7827.53 allowed a … | |
| CVE-2026-11639 | Medium | 0.3% | 7.5 | Use after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 al… | |
| CVE-2026-35558 | Medium | 0.3% | 7.8 | Improper neutralization of special elements in the authentication components in … | |
| CVE-2026-11191 | Medium | 0.3% | 8.8 | Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 all… | |
| CVE-2026-21277 | Medium | 0.3% | 7.8 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based … | |
| CVE-2026-21304 | Medium | 0.3% | 7.8 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based … | |
| CVE-2026-27311 | Medium | 0.3% | 7.8 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer O… | |
| CVE-2026-27312 | Medium | 0.3% | 7.8 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer O… | |
| CVE-2026-11643 | Medium | 0.3% | 8.1 | Use after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remot… | |
| CVE-2026-11629 | Medium | 0.3% | 8.8 | Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a remot… | |
| CVE-2026-17950 | Medium | 0.3% | 8.8 | Inappropriate implementation in Safebrowsing in Google Chrome on Mac prior to 15… | |
| CVE-2026-43728 | Medium | 0.3% | 7.5 | This issue was addressed through improved state management. This issue is fixed … | |
| CVE-2026-10961 | Medium | 0.3% | 8.3 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 … | |
| CVE-2026-27310 | Medium | 0.3% | 7.8 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer O… | |
| CVE-2026-11153 | Medium | 0.3% | 9.1 | Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.5… | |
| CVE-2026-11242 | Medium | 0.3% | 7.5 | Insufficient validation of untrusted input in Plugins in Google Chrome prior to … | |
| CVE-2026-11255 | Medium | 0.3% | 7.5 | Insufficient validation of untrusted input in Storage Access API in Google Chrom… | |
| CVE-2026-11632 | Medium | 0.3% | 7.5 | Use after free in TabStrip in Google Chrome prior to 149.0.7827.103 allowed a re… | |
| CVE-2026-10888 | Medium | 0.3% | 8.8 | Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed… | |
| CVE-2026-11637 | Medium | 0.3% | 8.8 | Use after free in Views in Google Chrome on Mac prior to 149.0.7827.103 allowed … | |
| CVE-2026-11646 | Medium | 0.3% | 8.8 | Use after free in ViewTransitions in Google Chrome prior to 149.0.7827.103 allow… | |
| CVE-2026-48346 | Medium | 0.3% | 7.9 | Animate is affected by an Untrusted Search Path vulnerability that could result … | |
| CVE-2026-10005 | Medium | 0.3% | 7.5 | Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216… | |
| CVE-2026-35560 | Medium | 0.3% | 7.4 | Improper certificate validation in the identity provider connection components i… | |
| CVE-2026-11144 | Medium | 0.3% | 8.8 | Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-9940 | Medium | 0.3% | 8.8 | Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a… |