Exploited CVEs / By vendor / Apple

Apple vulnerabilities actively exploited

93 Apple CVEs on the CISA Known Exploited Vulnerabilities catalog, newest first. Refreshed daily.

Every CVE below is confirmed exploited in the wild, not just theoretically severe. The newest addition is CVE-2025-31277 (Multiple Products, added 2026-03-20). New CISA KEV entries appear here the day they are cataloged; the freshest across all vendors are on exploited this week.

93 exploited CVEs

Ask your own AI about Apple exploited CVEs

Copy this prompt into Claude, ChatGPT, or Copilot. The facts are included, sourced from this page.

Multiple Products: 53 exploited CVEs

CVEProductAdded to KEVSignals
CVE-2025-31277Multiple Products2026-03-20CVSS 8.8, EPSS 1%
CVE-2025-43510Multiple Products2026-03-20CVSS 7.8, EPSS 0%
CVE-2025-43520Multiple Products2026-03-20CVSS 5.5, EPSS 0%
CVE-2021-30952Multiple Products2026-03-05CVSS 7.8, EPSS 8%
CVE-2023-43000Multiple Products2026-03-05CVSS 8.8, EPSS 4%
CVE-2026-20700Multiple Products2026-02-12CVSS 7.8, EPSS 1%
CVE-2025-43529Multiple Products2025-12-15CVSS 8.8, EPSS 8%
CVE-2022-48503Multiple Products2025-10-20CVSS 8.8, EPSS 3%
CVE-2025-43200Multiple Products2025-06-16CVSS 4.2, EPSS 1%
CVE-2025-31200Multiple Products2025-04-17CVSS 9.8, EPSS 21%
CVE-2025-31201Multiple Products2025-04-17CVSS 9.8, EPSS 12%
CVE-2025-24201Multiple Products2025-03-13CVSS 10.0, EPSS 4%
CVE-2025-24085Multiple Products2025-01-29CVSS 10.0, EPSS 19%
CVE-2024-44308Multiple Products2024-11-21CVSS 8.8, EPSS 9%
CVE-2024-44309Multiple Products2024-11-21CVSS 6.3, EPSS 21%
CVE-2024-23225Multiple Products2024-03-06CVSS 7.8, EPSS 1%
CVE-2024-23296Multiple Products2024-03-06CVSS 7.8, EPSS 1%
CVE-2022-48618Multiple Products2024-01-31CVSS 7.0, EPSS 0%
CVE-2024-23222Multiple Products2024-01-23CVSS 8.8, EPSS 11%
CVE-2023-41990Multiple Products2024-01-08CVSS 7.8, EPSS 1%
CVE-2023-42916Multiple Products2023-12-04CVSS 6.5, EPSS 18%
CVE-2023-42917Multiple Products2023-12-04CVSS 8.8, EPSS 9%
CVE-2023-41991Multiple Products2023-09-25CVSS 5.5, EPSS 5%
CVE-2023-41992Multiple Products2023-09-25CVSS 7.8, EPSS 3%
CVE-2023-41993Multiple Products2023-09-25CVSS 8.8, EPSS 29%
CVE-2023-38606Multiple Products2023-07-26CVSS 5.5, EPSS 1%
CVE-2023-37450Multiple Products2023-07-13CVSS 8.8, EPSS 18%
CVE-2023-32434Multiple Products2023-06-23CVSS 7.8, EPSS 52%
CVE-2023-32435Multiple Products2023-06-23CVSS 8.8, EPSS 23%
CVE-2023-32439Multiple Products2023-06-23CVSS 8.8, EPSS 24%
CVE-2023-28204Multiple Products2023-05-22CVSS 6.5, EPSS 14%
CVE-2023-32373Multiple Products2023-05-22CVSS 8.8, EPSS 12%
CVE-2023-32409Multiple Products2023-05-22CVSS 8.6, EPSS 17%
CVE-2023-28205Multiple Products2023-04-10CVSS 8.8, EPSS 27%
CVE-2023-23529Multiple Products2023-02-14CVSS 8.8, EPSS 9%
CVE-2018-4344Multiple Products2022-06-27CVSS 7.8, EPSS 3%
CVE-2019-8605Multiple Products2022-06-27CVSS 7.8, EPSS 17%
CVE-2020-3837Multiple Products2022-06-27CVSS 7.8, EPSS 16%
CVE-2020-9907Multiple Products2022-06-27CVSS 7.8, EPSS 4%
CVE-2019-7286Multiple Products2022-05-23CVSS 7.8, EPSS 16%
CVE-2021-30883Multiple Products2022-05-23CVSS 7.8, EPSS 15%
CVE-2019-8506Multiple Products2022-05-04CVSS 8.8, EPSS 18%
CVE-2021-1789Multiple Products2022-05-04CVSS 8.8, EPSS 15%
CVE-2020-27930Multiple Products2021-11-03CVSS 7.8, EPSS 22%
CVE-2020-27932Multiple Products2021-11-03CVSS 7.8, EPSS 10%
CVE-2020-27950Multiple Products2021-11-03CVSS 5.5, EPSS 17%
CVE-2020-9859Multiple Products2021-11-03CVSS 7.8, EPSS 1%
CVE-2021-1782Multiple Products2021-11-03CVSS 7.0, EPSS 2%
CVE-2021-30661Multiple Products2021-11-03CVSS 8.8, EPSS 5%
CVE-2021-30663Multiple Products2021-11-03CVSS 8.8, EPSS 4%
CVE-2021-30665Multiple Products2021-11-03CVSS 8.8, EPSS 4%
CVE-2021-30807Multiple Products2021-11-03CVSS 7.8, EPSS 29%
CVE-2021-30860Multiple Products2021-11-03CVSS 7.8, EPSS 76%

iOS, iPadOS, and macOS: 11 exploited CVEs

CVEProductAdded to KEVSignals
CVE-2025-43300iOS, iPadOS, and macOS2025-08-21CVSS 10.0, EPSS 20%
CVE-2023-41064iOS, iPadOS, and macOS2023-09-11CVSS 7.8, EPSS 15%
CVE-2023-28206iOS, iPadOS, and macOS2023-04-10CVSS 8.6, EPSS 25%
CVE-2021-30900iOS, iPadOS, and macOS2023-03-30CVSS 7.8, EPSS 5%
CVE-2022-32917iOS, iPadOS, and macOS2022-09-14CVSS 7.8, EPSS 6%
CVE-2020-9934iOS, iPadOS, and macOS2022-09-08CVSS 5.5, EPSS 3%
CVE-2022-22620iOS, iPadOS, and macOS2022-02-11CVSS 8.8, EPSS 16%
CVE-2021-1870iOS, iPadOS, and macOS2021-11-03CVSS 9.8, EPSS 8%
CVE-2021-1871iOS, iPadOS, and macOS2021-11-03CVSS 9.8, EPSS 7%
CVE-2021-30858iOS, iPadOS, and macOS2021-11-03CVSS 8.8, EPSS 13%
CVE-2021-30869iOS, iPadOS, and macOS2021-11-03CVSS 7.8, EPSS 4%

iOS: 8 exploited CVEs

CVEProductAdded to KEVSignals
CVE-2022-42856iOS2022-12-14CVSS 8.8, EPSS 9%
CVE-2016-4655iOS2022-05-24CVSS 5.5, EPSS 33%
CVE-2016-4656iOS2022-05-24CVSS 7.8, EPSS 24%
CVE-2016-4657iOS2022-05-24CVSS 8.8, EPSS 67%
CVE-2019-7287iOS2022-05-23CVSS 7.8, EPSS 5%
CVE-2021-30666iOS2021-11-03CVSS 8.8, EPSS 3%
CVE-2021-30761iOS2021-11-03CVSS 8.8, EPSS 11%
CVE-2021-30762iOS2021-11-03CVSS 8.8, EPSS 11%

iOS and iPadOS: 5 exploited CVEs

CVEProductAdded to KEVSignals
CVE-2023-41974iOS and iPadOS2026-03-05CVSS 7.8, EPSS 1%
CVE-2025-24200iOS and iPadOS2025-02-12CVSS 6.1, EPSS 5%
CVE-2023-42824iOS and iPadOS2023-10-05CVSS 7.8, EPSS 1%
CVE-2022-42827iOS and iPadOS2022-10-25CVSS 7.8, EPSS 1%
CVE-2021-30983iOS and iPadOS2022-06-27CVSS 7.8, EPSS 3%

macOS: 5 exploited CVEs

CVEProductAdded to KEVSignals
CVE-2019-8526macOS2023-04-17CVSS 7.8, EPSS 1%
CVE-2022-22674macOS2022-04-04CVSS 5.5, EPSS 1%
CVE-2022-22675macOS2022-04-04CVSS 7.8, EPSS 13%
CVE-2021-30657macOS2021-11-03CVSS 5.5, EPSS 69%
CVE-2021-30713macOS2021-11-03CVSS 7.8, EPSS 7%

iOS, iPadOS, and watchOS: 4 exploited CVEs

CVEProductAdded to KEVSignals
CVE-2023-41061iOS, iPadOS, and watchOS2023-09-11CVSS 7.8, EPSS 3%
CVE-2020-9818iOS, iPadOS, and watchOS2021-11-03CVSS 8.8, EPSS 2%
CVE-2020-9819iOS, iPadOS, and watchOS2021-11-03CVSS 4.3, EPSS 2%
CVE-2021-1879iOS, iPadOS, and watchOS2021-11-03CVSS 6.1, EPSS 7%

iOS and macOS: 4 exploited CVEs

CVEProductAdded to KEVSignals
CVE-2022-32893iOS and macOS2022-08-18CVSS 8.8, EPSS 10%
CVE-2022-32894iOS and macOS2022-08-18CVSS 7.8, EPSS 3%
CVE-2022-22587iOS and macOS2022-01-28CVSS 9.8, EPSS 12%
CVE-2019-6223iOS and macOS2021-11-03CVSS 7.5, EPSS 3%

Other Apple products

CVEProductAdded to KEVSignals
CVE-2021-31010iOS, macOS, watchOS2022-08-25CVSS 7.5, EPSS 4%
CVE-2014-4404OS X2022-02-10CVSS 7.8, EPSS 49%
CVE-2015-1130OS X2022-02-10CVSS 7.8, EPSS 10%

Common questions about exploited Apple CVEs

Which Apple vulnerabilities are actively exploited?

As of July 2026, 93 Apple CVEs are on the CISA Known Exploited Vulnerabilities catalog, meaning exploitation in the wild is confirmed. The most-listed products are Multiple Products (53), iOS, iPadOS, and macOS (11), iOS (8), iOS and iPadOS (5).

What is the newest exploited Apple CVE?

CVE-2025-31277, affecting Multiple Products, added to the CISA KEV catalog on 2026-03-20. This page refreshes daily, so the newest entry is always first in the table.

How urgent are these Apple CVEs?

KEV listing is the strongest fix-first signal there is: it means confirmed exploitation, not a prediction. Patch these ahead of higher-CVSS issues that nobody is exploiting. Check the vendor advisory (linked below) for fixed versions and workarounds.

Can I ask my own AI about exploited Apple CVEs?

Yes. This page includes a free copy-paste AI prompt carrying the newest Apple KEV entries, with CVSS, EPSS, and ransomware context, into Claude, ChatGPT, or Copilot. The data is refreshed daily.

Authoritative references

CISA Known Exploited Vulnerabilities CatalogApple security releasesNIST National Vulnerability DatabaseFIRST.org EPSS

All vendors, searchable with due dates and CSV export: the exploited-CVE tracker. Every vendor with a page: exploited by vendor.

Sponsored by SenservaMicrosoft 365, Intune, Defender, and Entra ID security and compliance, with automated remediation and Trustworthy AI.Scan free
Lexicon: the terms on this page
CVE
Common Vulnerabilities and Exposures. A unique ID for one publicly known vulnerability, such as CVE-2025-1234.
KB
Microsoft Knowledge Base article. The identifier for a specific Microsoft update.
KEV
CISA Known Exploited Vulnerabilities. CVEs confirmed exploited in the wild. Fix these first.
CVSS
Common Vulnerability Scoring System. A standardized Severity score from 0 to 10.
EPSS
Exploit Prediction Scoring System. The probability a CVE will be exploited in the next 30 days.
MSRC
Microsoft Security Response Center. Microsoft's Patch Tuesday advisories and KB-to-CVE mapping.
NVD
National Vulnerability Database (NIST). Authoritative CVE metadata and CVSS scores.
Ransomware
The vulnerability is linked to known ransomware activity.
Reference: the Microsoft patching guide, how Intune, Windows Autopatch, Defender, and Azure Update Manager fit together.
Data notice: this page, the feeds, and the API are provided as is, for informational purposes only, without warranty of any kind. Senserva, LLC does not guarantee the accuracy, completeness, or timeliness of third-party data (MSRC, NVD, CISA KEV, EPSS) and accepts no liability for actions taken based on it; verify against the authoritative vendor advisory before acting. Built daily with Senserva Trustworthy AI. All use of this data is subject to the Senserva EULA.