Vendor History
Email, files and business apps
Apple security incident history
Updated . Data gathered daily from official public sources.
As of Oct 26, 2026, Vendor History found 95 actively exploited security flaws for Apple, dated Nov 3, 2021 to Sep 29, 2026. Sources checked: the California and Washington Attorney General breach lists, SEC EDGAR (Form 8-K, Item 1.05) and CISA's Known Exploited Vulnerabilities catalog.
Breach notices and SEC cyber filings
None found in the sources we check.
Got a breach letter from Apple? What to do when a vendor has a data breach.
Actively exploited security flaws
Flaws in Apple products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.
-
Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple macOS Improper Authentication Vulnerability (CVE-2026-65400). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Buffer Overflow Vulnerability (CVE-2025-31277). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Improper Locking Vulnerability (CVE-2025-43510). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Classic Buffer Overflow Vulnerability (CVE-2025-43520). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Integer Overflow or Wraparound Vulnerability (CVE-2021-30952). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS and iPadOS Use-After-Free Vulnerability (CVE-2023-41974). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple products Use-After-Free Vulnerability (CVE-2023-43000). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Buffer Overflow Vulnerability (CVE-2026-20700). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Use-After-Free WebKit Vulnerability (CVE-2025-43529). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Unspecified Vulnerability (CVE-2022-48503). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability (CVE-2025-43300). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Unspecified Vulnerability (CVE-2025-43200). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Memory Corruption Vulnerability (CVE-2025-31200). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Arbitrary Read and Write Vulnerability (CVE-2025-31201). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability (CVE-2025-24201). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS and iPadOS Incorrect Authorization Vulnerability (CVE-2025-24200). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Use-After-Free Vulnerability (CVE-2025-24085). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Code Execution Vulnerability (CVE-2024-44308). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability (CVE-2024-44309). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Memory Corruption Vulnerability (CVE-2024-23225). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Memory Corruption Vulnerability (CVE-2024-23296). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Memory Corruption Vulnerability (CVE-2022-48618). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Type Confusion Vulnerability (CVE-2024-23222). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Code Execution Vulnerability (CVE-2023-41990). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability (CVE-2023-42916). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Memory Corruption Vulnerability (CVE-2023-42917). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability (CVE-2023-42824). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Improper Certificate Validation Vulnerability (CVE-2023-41991). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Kernel Privilege Escalation Vulnerability (CVE-2023-41992). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Code Execution Vulnerability (CVE-2023-41993). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability (CVE-2023-41061). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability (CVE-2023-41064). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Kernel Unspecified Vulnerability (CVE-2023-38606). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Code Execution Vulnerability (CVE-2023-37450). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Integer Overflow Vulnerability (CVE-2023-32434). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Memory Corruption Vulnerability (CVE-2023-32435). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Type Confusion Vulnerability (CVE-2023-32439). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability (CVE-2023-28204). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Use-After-Free Vulnerability (CVE-2023-32373). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Sandbox Escape Vulnerability (CVE-2023-32409). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple macOS Use-After-Free Vulnerability (CVE-2019-8526). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Use-After-Free Vulnerability (CVE-2023-28205). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability (CVE-2023-28206). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability (CVE-2021-30900). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Type Confusion Vulnerability (CVE-2023-23529). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS Type Confusion Vulnerability (CVE-2022-42856). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS and iPadOS Out-of-Bounds Write Vulnerability (CVE-2022-42827). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability (CVE-2022-32917). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and macOS Input Validation Vulnerability (CVE-2020-9934). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability (CVE-2021-31010). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS and macOS Out-of-Bounds Write Vulnerability (CVE-2022-32893). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS and macOS Out-of-Bounds Write Vulnerability (CVE-2022-32894). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Memory Corruption Vulnerability (CVE-2018-4344). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Use-After-Free Vulnerability (CVE-2019-8605). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Memory Corruption Vulnerability (CVE-2020-3837). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Memory Corruption Vulnerability (CVE-2020-9907). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS and iPadOS Buffer Overflow Vulnerability (CVE-2021-30983). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS Information Disclosure Vulnerability (CVE-2016-4655). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS Memory Corruption Vulnerability (CVE-2016-4656). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS Webkit Memory Corruption Vulnerability (CVE-2016-4657). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Memory Corruption Vulnerability (CVE-2019-7286). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS Memory Corruption Vulnerability (CVE-2019-7287). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Memory Corruption Vulnerability (CVE-2021-30883). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Type Confusion Vulnerability (CVE-2019-8506). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Type Confusion Vulnerability (CVE-2021-1789). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple macOS Out-of-Bounds Read Vulnerability (CVE-2022-22674). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple macOS Out-of-Bounds Write Vulnerability (CVE-2022-22675). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability (CVE-2022-22620). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple OS X Heap-Based Buffer Overflow Vulnerability (CVE-2014-4404). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple OS X Authentication Bypass Vulnerability (CVE-2015-1130). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Memory Corruption Vulnerability (CVE-2022-22587). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS and macOS Group Facetime Vulnerability (CVE-2019-6223). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Memory Corruption Vulnerability (CVE-2020-27930). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Type Confusion Vulnerability (CVE-2020-27932). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Memory Initialization Vulnerability (CVE-2020-27950). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability (CVE-2020-9818). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability (CVE-2020-9819). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Code Execution Vulnerability (CVE-2020-9859). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Race Condition Vulnerability (CVE-2021-1782). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability (CVE-2021-1870). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability (CVE-2021-1871). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability (CVE-2021-1879). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple macOS Unspecified Vulnerability (CVE-2021-30657). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Storage Use-After-Free Vulnerability (CVE-2021-30661). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Integer Overflow Vulnerability (CVE-2021-30663). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products WebKit Memory Corruption Vulnerability (CVE-2021-30665). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS WebKit Buffer Overflow Vulnerability (CVE-2021-30666). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple macOS Unspecified Vulnerability (CVE-2021-30713). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS WebKit Memory Corruption Vulnerability (CVE-2021-30761). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS WebKit Use-After-Free Vulnerability (CVE-2021-30762). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Memory Corruption Vulnerability (CVE-2021-30807). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, macOS Use-After-Free Vulnerability (CVE-2021-30858). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Integer Overflow Vulnerability (CVE-2021-30860). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple iOS, iPadOS, and macOS Type Confusion Vulnerability (CVE-2021-30869). Added to CISA's list of security flaws known to be exploited by attackers.
We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works
To cite: Vendor History, "Apple security incident history," vendorhistory.com/vendor/apple, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.