Apple
CVEs currently on EVULNABLE's Priority Feed for Apple, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 1 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 0 | 0 |
| 2026-04-27 | 0 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 0 | 0 |
| 2026-05-18 | 0 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 0 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 0 | 0 |
| 2026-07-06 | 0 | 0 |
| 2026-07-13 | 0 | 0 |
| 2026-07-20 | 0 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 0 | 0 |
| 2026-08-10 | 0 | 0 |
| 2026-08-17 | 1 | 0 |
| 2026-08-24 | 0 | 0 |
| 2026-08-31 | 0 | 0 |
| 2026-09-07 | 0 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 0 | 0 |
| 2026-09-28 | 1 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 0 | 0 |
In EVULNABLE's ranked feed
Showing the top 50 of 95 Apple CVEs in EVULNABLE's ranked feed.
#1 78 Urgent CVE-2021-30860 KEV since 2021 · listed over a yearCISA KEV Apple — Apple Multiple Products Integer Overflow Vulnerability KEV, EPSS 76.0%
EVRS 78/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.760.
#2 77 Urgent CVE-2016-4657 KEV since 2022 · listed over a yearCISA KEV Apple — Apple iOS Webkit Memory Corruption Vulnerability KEV, EPSS 66.8%
EVRS 77/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.668.
#3 75 Urgent CVE-2021-30657 KEV since 2021 · listed over a yearCISA KEV Apple — Apple macOS Unspecified Vulnerability KEV, EPSS 68.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.685.
#4 75 Urgent CVE-2023-41064 KEV since 2023 · listed over a yearCISA KEV Apple — Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability KEV, EPSS 53.4%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.534.
#5 75 Urgent CVE-2023-32434 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products Integer Overflow Vulnerability KEV, EPSS 51.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.515.
#6 75 Urgent CVE-2014-4404 KEV since 2022 · listed over a yearCISA KEV Apple — Apple OS X Heap-Based Buffer Overflow Vulnerability KEV, EPSS 48.9%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.489.
#7 75 Urgent CVE-2016-4655 KEV since 2022 · listed over a yearCISA KEV Apple — Apple iOS Information Disclosure Vulnerability KEV, EPSS 33.4%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.334.
#8 75 Urgent CVE-2025-43300 KEV since 2025 · listed over a yearCISA KEV Apple — Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability KEV, EPSS 32.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.325.
#9 75 Urgent CVE-2021-30807 KEV since 2021 · listed over a yearCISA KEV Apple — Apple Multiple Products Memory Corruption Vulnerability KEV, EPSS 28.8%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.288.
#10 75 Urgent CVE-2023-28205 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products WebKit Use-After-Free Vulnerability KEV, EPSS 27.1%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.271.
#11 75 Urgent CVE-2023-41993 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products WebKit Code Execution Vulnerability KEV, EPSS 24.3%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.243.
#12 75 Urgent CVE-2023-32439 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products WebKit Type Confusion Vulnerability KEV, EPSS 24.0%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.240.
#13 75 Urgent CVE-2016-4656 KEV since 2022 · listed over a yearCISA KEV Apple — Apple iOS Memory Corruption Vulnerability KEV, EPSS 23.6%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.236.
#14 75 Urgent CVE-2023-28206 KEV since 2023 · listed over a yearCISA KEV Apple — Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability KEV, EPSS 23.2%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.232.
#15 75 Urgent CVE-2023-32435 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products WebKit Memory Corruption Vulnerability KEV, EPSS 23.0%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.230.
#16 75 Urgent CVE-2024-44309 KEV since 2024 · listed over a yearCISA KEV Apple — Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability KEV, EPSS 22.6%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.226.
#17 75 Urgent CVE-2020-27930 KEV since 2021 · listed over a yearCISA KEV Apple — Apple Multiple Products Memory Corruption Vulnerability KEV, EPSS 22.0%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.220.
#18 75 Urgent CVE-2025-31200 KEV since 2025 · listed over a yearCISA KEV Apple — Apple Multiple Products Memory Corruption Vulnerability KEV, EPSS 20.9%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.209.
#19 75 Urgent CVE-2023-37450 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products WebKit Code Execution Vulnerability KEV, EPSS 18.9%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.190.
#20 75 Urgent CVE-2023-42916 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability KEV, EPSS 17.8%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.178.
#21 75 Urgent CVE-2019-8605 KEV since 2022 · listed over a yearCISA KEV Apple — Apple Multiple Products Use-After-Free Vulnerability KEV, EPSS 17.6%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.176.
#22 75 Urgent CVE-2025-24085 KEV since 2025 · listed over a yearCISA KEV Apple — Apple Multiple Products Use-After-Free Vulnerability KEV, EPSS 17.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.175.
#23 75 Urgent CVE-2023-32409 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products WebKit Sandbox Escape Vulnerability KEV, EPSS 16.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.165.
#24 75 Urgent CVE-2020-27950 KEV since 2021 · listed over a yearCISA KEV Apple — Apple Multiple Products Memory Initialization Vulnerability KEV, EPSS 16.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.165.
#25 75 Urgent CVE-2022-22620 KEV since 2022 · listed over a yearCISA KEV Apple — Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability KEV, EPSS 16.3%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.163.
#26 75 Urgent CVE-2019-8506 KEV since 2022 · listed over a yearCISA KEV Apple — Apple Multiple Products Type Confusion Vulnerability KEV, EPSS 16.2%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.162.
#27 75 Urgent CVE-2019-7286 KEV since 2022 · listed over a yearCISA KEV Apple — Apple Multiple Products Memory Corruption Vulnerability KEV, EPSS 15.9%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.159.
#28 75 Urgent CVE-2020-3837 KEV since 2022 · listed over a yearCISA KEV Apple — Apple Multiple Products Memory Corruption Vulnerability KEV, EPSS 14.8%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.148.
#29 75 Urgent CVE-2021-30883 KEV since 2022 · listed over a yearCISA KEV Apple — Apple Multiple Products Memory Corruption Vulnerability KEV, EPSS 14.7%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.147.
#30 75 Urgent CVE-2023-28204 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability KEV, EPSS 14.3%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.143.
#31 75 Urgent CVE-2021-1789 KEV since 2022 · listed over a yearCISA KEV Apple — Apple Multiple Products Type Confusion Vulnerability KEV, EPSS 14.0%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.140.
#32 75 Urgent CVE-2025-31201 KEV since 2025 · listed over a yearCISA KEV Apple — Apple Multiple Products Arbitrary Read and Write Vulnerability KEV, EPSS 14.0%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.140.
#33 75 Urgent CVE-2023-41991 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products Improper Certificate Validation Vulnerability KEV, EPSS 13.4%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.134.
#34 75 Urgent CVE-2021-30858 KEV since 2021 · listed over a yearCISA KEV Apple — Apple iOS, iPadOS, macOS Use-After-Free Vulnerability KEV, EPSS 13.4%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.134.
#35 75 Urgent CVE-2022-22675 KEV since 2022 · listed over a yearCISA KEV Apple — Apple macOS Out-of-Bounds Write Vulnerability KEV, EPSS 12.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.125.
#36 75 Urgent CVE-2023-32373 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products WebKit Use-After-Free Vulnerability KEV, EPSS 12.2%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.122.
#37 75 Urgent CVE-2022-22587 KEV since 2022 · listed over a yearCISA KEV Apple — Apple Memory Corruption Vulnerability KEV, EPSS 11.6%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.116.
#38 75 Urgent CVE-2021-30762 KEV since 2021 · listed over a yearCISA KEV Apple — Apple iOS WebKit Use-After-Free Vulnerability KEV, EPSS 11.0%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.110.
#39 75 Urgent CVE-2024-23222 KEV since 2024 · listed over a yearCISA KEV Apple — Apple Multiple Products WebKit Type Confusion Vulnerability KEV, EPSS 10.6%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.106.
#40 75 Urgent CVE-2021-30761 KEV since 2021 · listed over a yearCISA KEV Apple — Apple iOS WebKit Memory Corruption Vulnerability KEV, EPSS 10.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.105.
#41 75 Urgent CVE-2020-27932 KEV since 2021 · listed over a yearCISA KEV Apple — Apple Multiple Products Type Confusion Vulnerability KEV, EPSS 10.3%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.103.
#42 75 Urgent CVE-2024-44308 KEV since 2024 · listed over a yearCISA KEV Apple — Apple Multiple Products Code Execution Vulnerability KEV, EPSS 10.2%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.102.
#43 75 Urgent CVE-2022-32893 KEV since 2022 · listed over a yearCISA KEV Apple — Apple iOS and macOS Out-of-Bounds Write Vulnerability KEV, EPSS 9.9%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.099.
#44 75 Urgent CVE-2015-1130 KEV since 2022 · listed over a yearCISA KEV Apple — Apple OS X Authentication Bypass Vulnerability KEV, EPSS 9.9%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.099.
#45 75 Urgent CVE-2023-41992 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products Kernel Privilege Escalation Vulnerability KEV, EPSS 9.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.095.
#46 75 Urgent CVE-2023-23529 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products WebKit Type Confusion Vulnerability KEV, EPSS 9.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.095.
#47 75 Urgent CVE-2023-42917 KEV since 2023 · listed over a yearCISA KEV Apple — Apple Multiple Products WebKit Memory Corruption Vulnerability KEV, EPSS 9.3%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.093.
#48 75 Urgent CVE-2025-43529 CISA federal deadline · Overdue by 9 monthsCISA KEV Apple — Apple Multiple Products Use-After-Free WebKit Vulnerability KEV, EPSS 8.8%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.088.
#49 75 Urgent CVE-2022-42856 KEV since 2022 · listed over a yearCISA KEV Apple — Apple iOS Type Confusion Vulnerability KEV, EPSS 8.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.085.
#50 75 Urgent CVE-2021-1870 KEV since 2021 · listed over a yearCISA KEV Apple — Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability KEV, EPSS 7.7%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.077.
