LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor1 exploited in the wild

Apple

187 CVEs published in the last four months and 12 stories. Exploited flaws first.

Critical58
High128
Medium1
Exploited (KEV)1

Patch these first

CVECVSSSeverityProductSummaryPublished
CVE-2026-65400exploited9.8criticalmacosAn authentication issue was addressed with improved state management.75d ago

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-437489.8criticalmacosAn out-of-bounds write issue was addressed with improved bounds checking.85d ago
CVE-2026-437109.8criticalmacosThe issue was addressed with improved memory handling.85d ago
CVE-2026-436949.8criticalmacosThe issue was addressed with improved memory handling.85d ago
CVE-2026-647709.8criticalipadosAn out-of-bounds write issue was addressed with improved bounds checking.85d ago
CVE-2026-436829.8criticalmacosThe issue was addressed with improved memory handling.85d ago
CVE-2026-647699.8criticalipadosAn out-of-bounds write issue was addressed with improved bounds checking.85d ago
CVE-2026-398739.8criticalmacosThe issue was addressed with improved memory handling.85d ago
CVE-2026-289829.8criticalmacosA race condition was addressed with improved locking.85d ago
CVE-2026-289289.8criticalipadosA use after free issue was addressed with improved memory management.85d ago
CVE-2026-437509.8criticalmacosA buffer overflow was addressed with improved bounds checking.85d ago
CVE-2026-437309.8criticalipadosA permissions issue was addressed with additional restrictions.85d ago
CVE-2026-289119.8criticalmacosThe issue was addressed with improved memory handling.85d ago
CVE-2026-647679.8criticalmacosA buffer overflow was addressed with improved bounds checking.85d ago
CVE-2026-647629.8criticalmacosAn out-of-bounds read was addressed with improved bounds checking.85d ago
CVE-2026-647519.8criticalipadosA use after free issue was addressed with improved memory management.85d ago
CVE-2026-647469.8criticalipadosAn authorization issue was addressed with improved validation.85d ago
CVE-2026-647389.8criticalmacosA permissions issue was addressed with additional restrictions.85d ago
CVE-2026-647339.8criticalipadosThis issue was addressed with improved data protection.85d ago
CVE-2026-647319.8criticalmacosA path handling issue was addressed with improved validation.85d ago
CVE-2026-647299.8criticalipadosA use after free issue was addressed with improved memory management.85d ago
CVE-2026-65400exploited9.8criticalmacosAn authentication issue was addressed with improved state management.75d ago
CVE-2026-647279.8criticalmacosA type confusion issue was addressed with improved memory handling.85d ago
CVE-2026-647269.8criticalipadosThe issue was addressed with improved memory handling.85d ago
CVE-2026-647209.8criticalipadosA race condition was addressed with improved state handling.85d ago
CVE-2026-647049.8criticalmacosA type confusion issue was addressed with improved memory handling.85d ago
CVE-2026-647039.8criticalmacosA use after free issue was addressed with improved memory management.85d ago
CVE-2026-647759.8criticalipadosA memory initialization issue was addressed with improved memory handling.85d ago
CVE-2026-647029.8criticalmacosAn access issue was addressed with additional sandbox restrictions.85d ago
CVE-2026-647009.8criticalipadosA use after free issue was addressed with improved memory management.85d ago
CVE-2026-646989.8criticalmacosThe issue was addressed with improved memory handling.85d ago
CVE-2026-647749.8criticalipadosAn integer overflow was addressed with improved input validation.85d ago
CVE-2026-646979.8criticalmacosThe issue was addressed with improved memory handling.85d ago
CVE-2026-646969.8criticalmacosThe issue was addressed with improved memory handling.85d ago
CVE-2026-646959.8criticalmacosThe issue was addressed with improved memory handling.85d ago
CVE-2026-646949.8criticalmacosAn integer overflow was addressed with improved input validation.85d ago
CVE-2026-437989.8criticalswiftnio sshA single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-co61d ago
CVE-2026-646919.8criticalmacosA buffer overflow was addressed with improved size validation.85d ago
CVE-2026-438229.8criticalipadosA use after free issue was addressed with improved memory management.85d ago
CVE-2026-438149.8criticalipadosA use after free issue was addressed with improved memory management.85d ago
CVE-2026-438129.8criticalipadosA use after free issue was addressed with improved memory management.85d ago
CVE-2026-438109.8criticalipadosThe issue was addressed with improved memory handling.85d ago
CVE-2026-438099.8criticalmacosAn out-of-bounds read was addressed with improved bounds checking.85d ago
CVE-2026-438079.8criticalipadosA buffer overflow was addressed with improved bounds checking.85d ago
CVE-2026-647729.8criticalipadosAn out-of-bounds write issue was addressed with improved input validation.85d ago
CVE-2026-438059.8criticalipadosA race condition was addressed with improved state handling.85d ago
CVE-2026-438039.8criticalipadosAn out-of-bounds write issue was addressed with improved bounds checking.85d ago
CVE-2026-438029.8criticalmacosAn out-of-bounds write issue was addressed with improved bounds checking.85d ago
CVE-2026-437999.8criticalipadosA use after free issue was addressed with improved memory management.85d ago
CVE-2026-437939.8criticalmacosAn issue existed in the handling of environment variables.85d ago
CVE-2026-647719.8criticalipadosA buffer overflow was addressed with improved bounds checking.85d ago
CVE-2026-437799.8criticalmacosA logic issue was addressed with improved restrictions.85d ago
CVE-2026-437789.8criticalipadosA use after free issue was addressed with improved memory management.85d ago
CVE-2026-437739.8criticalmacosAn out-of-bounds read was addressed with improved bounds checking.85d ago
CVE-2026-437699.8criticalipadosAn integer overflow was addressed with improved input validation.85d ago
CVE-2026-437649.8criticalmacosAn integer overflow was addressed with improved input validation.85d ago
CVE-2026-437579.8criticalmacosAn out-of-bounds read was addressed with improved bounds checking.85d ago
CVE-2026-647409.3criticalipadosA parsing issue in the handling of directory paths was addressed with improved path validation.85d ago
CVE-2026-398689.1criticalipadosThis issue was addressed with improved input validation.113d ago
CVE-2026-437158.8highsafariA use-after-free issue was addressed with improved memory management.113d ago
CVE-2023-430108.8highsafariThe issue was addressed with improved memory handling.223d ago
CVE-2026-288478.8highipadosThe issue was addressed with improved memory handling.162d ago
CVE-2026-289238.8highmacosA logging issue was addressed with improved data redaction.162d ago
CVE-2026-289408.8highipadosThe issue was addressed with improved memory handling.162d ago
CVE-2026-289478.8highipadosA use-after-free issue was addressed with improved memory management.162d ago
CVE-2026-289558.8highipadosThe issue was addressed with improved memory handling.162d ago
CVE-2026-289788.8highmacosA permissions issue was addressed with additional restrictions.162d ago
CVE-2026-289958.8highipadosA logic issue was addressed with improved restrictions.162d ago
CVE-2025-435248.8highmacosAn access issue was addressed with additional sandbox restrictions.161d ago
CVE-2025-242848.8highmacosThis issue was addressed with improved checks to prevent unauthorized actions.131d ago
CVE-2026-437058.8highsafariA type confusion issue was addressed with improved checks.113d ago
CVE-2026-437318.8highsafariA use-after-free issue was addressed with improved memory management.113d ago
CVE-2026-289318.8highipadosA buffer overflow was addressed with improved bounds checking.85d ago
CVE-2026-438188.8highipadosAn integer overflow was addressed with improved input validation.85d ago
CVE-2026-647398.8highipadosAn out-of-bounds write issue was addressed with improved bounds checking.85d ago
CVE-2026-647578.8highsafariA memory corruption issue was addressed with improved state management.85d ago
CVE-2026-647838.8highsafariA use-after-free issue was addressed with improved memory management.85d ago
CVE-2026-437948.8highsafariA memory corruption issue was addressed with improved memory handling.64d ago
CVE-2026-653468.8highipadosAn integer overflow was addressed with improved input validation.64d ago
CVE-2026-436708.8highsafariA Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts.56d ago
CVE-2026-437608.6highmacosAn access issue was addressed with improved access restrictions.85d ago
CVE-2026-289738.6highipadosAn integer overflow was addressed with improved input validation.85d ago
CVE-2026-437728.2highmacosA path traversal issue was addressed with improved input validation.85d ago
CVE-2026-647378.2highmacosAn authorization issue was addressed with improved state management.85d ago
CVE-2026-647688.1highipadosAn out-of-bounds read issue was addressed with improved input validation.85d ago
CVE-2026-437358.1highsafariThe issue was addressed with improved checks.113d ago
CVE-2026-289078.1highipadosThe issue was addressed with improved input validation.162d ago
CVE-2026-647198.1highsafariAn out-of-bounds access issue was addressed with improved bounds checking.85d ago
CVE-2026-647138.1highsafariThis issue was addressed with improved checks.85d ago
CVE-2025-312727.8highmacosThe issue was addressed with improved checks.131d ago
CVE-2026-647637.8highipadosAn out-of-bounds write issue was addressed by removing the vulnerable code.85d ago
CVE-2026-437337.8highipadosThe issue was addressed with improved memory handling.85d ago
CVE-2026-647587.8highipadosThe issue was addressed with improved bounds checks.85d ago
CVE-2025-433067.8highmacosA logic issue was addressed with improved checks.147d ago
CVE-2026-398747.8highmacosA permissions issue was addressed with additional restrictions.85d ago
CVE-2026-647497.8highipadosThe issue was addressed with improved memory handling.85d ago
CVE-2026-437497.8highmacosA parsing issue in the handling of directory paths was addressed with improved path validation.85d ago
CVE-2026-398757.8highmacosA permissions issue was addressed with additional restrictions.85d ago
CVE-2026-647667.8highipadosAn integer overflow was addressed with improved input validation.85d ago
CVE-2026-647477.8highipadosA buffer overflow was addressed with improved size validation.85d ago
CVE-2026-647657.8highipadosAn integer overflow was addressed with improved input validation.85d ago

Filter the full tracker by Apple →

Our coverage of Apple

vulnerability

Microsoft, Adobe, Apple, and Foxit vulnerabilities

Cisco Talos's Vulnerability Discovery & Research team has recently disclosed a series of vulnerabilities affecting products from Microsoft, Adobe, Apple, and Foxit. All identified vulnerabilities have reportedly been patched by their respective vendors, aligning with Cisco's responsible disclosure policies. The issues range from privilege escalation and information disclosure to remote code…

ai

Apple tightens macOS disk access as AI agents become more powerful

Apple is implementing stricter controls for Full Disk Access in macOS, citing an increased risk to user privacy from increasingly capable and autonomous AI agents. The company indicated that future macOS versions will require users to take explicit steps to grant applications this permission. A specific rollout date and the precise mechanics of these new controls have not yet been detailed.

CVE-2026-86950high

Apple Products Vulnerability Exploited Same Day as Disclosure

A critical out-of-bounds write vulnerability in multiple Apple products was exploited on the same day it was disclosed. Both US and EU government catalogues now list it as actively exploited.

CVE-2026-86950

Apple Zero-Day Vulnerability Weaponized in Targeted Attacks

Apple has reported that a zero-day vulnerability, identified as CVE-2026-86950, is actively being exploited in targeted attacks. The company described the exploitation as highly sophisticated, indicating a significant level of attacker capability. This out-of-bounds write flaw affects Apple products, though specific affected versions or devices were not detailed in the announcement.

vulnerability

The vulnpocalypse rains iBugs down on Apple with record-setting number of patches

Apple has released a substantial security update across its operating systems and software, addressing over 260 Common Vulnerabilities and Exposures (CVEs). This marks the largest single patch cycle in the company's history. While no vulnerabilities are currently reported as being under active exploitation, the disclosure of these flaws often prompts attackers to attempt to exploit them.

security

Apple parental controls in iOS 27 let kids ask before opening new websites

Apple has released a comprehensive overhaul of its child-safety features across its device ecosystem, requiring iOS 27, iPadOS 27, and macOS 27. The new tools, which went live on September 14 after a June preview, are centered around the Child Account, which is mandatory for users under 13 and available for those up to 18. Apple emphasizes that without a Child Account, these age-based…

security

Researcher tricks Apple’s Find My into sharing location data with Linux

A security researcher has successfully enrolled a Linux device into Apple's Find My network, enabling it to receive live location data from individuals who had previously shared their location with the associated Apple account. This development allows a non-Apple device to access a feature typically restricted to Apple hardware.

vulnerability

CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for organizations to immediately patch several exploited vulnerabilities affecting products from Microsoft, VMware, and Apple. These security flaws are reportedly being actively leveraged in the wild, posing significant risks to affected systems and data. The agency's alert emphasizes the critical need…

CVE-2026-33824

U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, mandating that federal agencies patch them by August 21, 2026. The newly cataloged flaws affect Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft Internet Key Exchange (IKE) Service Extensions.

patch

Apple plugs image-processing hole ripe for spyware abuse

Apple has issued a series of security updates for its iPhones, iPads, and Macs, addressing a critical image-processing vulnerability that security experts believe could be exploited for spyware delivery. The most significant fix, identified as CVE-2026-65346, is an integer-overflow bug found within Apple's ImageIO framework, which is responsible for parsing image files.

vulnerability

Apple Patches iOS and macOS, (Mon, Aug 17th)

Apple has released significant security updates for its iOS/iPadOS and macOS operating systems, addressing a substantial number of vulnerabilities. The updates, released on Monday, August 17th, include iOS/iPadOS versions 26 and 18, and macOS version 26. This release follows a smaller macOS-specific update approximately two weeks prior that targeted a single screen-sharing vulnerability.

nation-state

Apple Screen Sharing Security, (Mon, Aug 17th)

A recent report has highlighted long-standing security characteristics of Apple's Screen Sharing feature, noting its reliance on the Virtual Network Computing (VNC) protocol. The report indicates that Apple's implementation, introduced with macOS 10.5 (Leopard) approximately two decades ago, largely retained the fundamental nature of VNC, which is described as a simple, unencrypted protocol…