Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Apple

28,601 known vulnerabilities

815
CRITICAL
4,965
HIGH
3,667
MEDIUM
422
LOW

Top Products

macos 6545 iphone os 3311 mac os x 2285 ipados 2055 tvos 1752 watchos 1660 safari 829 visionos 502 itunes 450 icloud 440
9,869 CVEs · Page 85/198
5.5
CVE-2023-40413

The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Montere

5.3
CVE-2023-40408

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Sonoma 1

3.3
CVE-2023-40405

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma

7.8
CVE-2023-40404

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.1. An app m

7.5
CVE-2023-40401

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.6.1. An attacker may

7.5
CVE-2023-32359

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.2 and iPadOS

4.3
CVE-2023-5726

A website could have obscured the full screen notification by using the file open dialog. This could have led to user co

6.6
CVE-2023-34045

VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during installation f

6.7
CVE-2023-34046

VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during instal

7.1
CVE-2023-34044

VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that

3.7
CVE-2022-43892

IBM Security Verify Privilege On-Premises 11.5 does not validate, or incorrectly validates, a certificate which could d

2.7
CVE-2022-43891

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information when a det

2.7
CVE-2022-43893

IBM Security Verify Privilege On-Premises 11.5 could allow a privileged user to cause by using a malicious payload. IB

5.3
CVE-2022-43889

IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information through an HTTP request that could

5.3
CVE-2022-22386

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by

5.9
CVE-2022-22385

IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information to an attacked due to the transmiss

5.0
CVE-2022-22380

IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly vali

7.2
CVE-2022-22375

IBM Security Verify Privilege On-Premises 11.5 could allow a remote authenticated attacker to execute arbitrary command

4.3
CVE-2021-38859

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain version number information using a speciall

6.5
CVE-2021-29913

IBM Security Verify Privilege On-Premise 11.5 could allow an authenticated user to obtain sensitive information or perf

5.3
CVE-2021-20581

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain sensitive information due to insufficient s

4.3
CVE-2022-22384

IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to modify messages returned from the server due

5.3
CVE-2022-22377

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by

5.5
CVE-2023-38217

Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by an Out-of-bounds Read vulnerability

5.5
CVE-2023-38216

Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by a Use After Free vulnerability that

7.8
CVE-2023-26370

Adobe Photoshop versions 23.5.5 (and earlier) and 24.7 (and earlier) are affected by an Access of Uninitialized Pointer

7.3
CVE-2023-5450

An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an at

7.8
CVE-2023-43611

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installati

7.1
CVE-2023-45247

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

7.1
CVE-2023-45246

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

5.5
CVE-2023-45245

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux

7.1
CVE-2023-45244

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

5.5
CVE-2023-45243

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protec

5.5
CVE-2023-45242

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protec

5.5
CVE-2023-45241

Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Cloud Agent (Li

5.5
CVE-2023-45240

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux

5.5
CVE-2023-44214

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux

7.1
CVE-2023-44212

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

7.1
CVE-2023-44211

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

7.8
CVE-2023-40299

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC p

5.0
CVE-2023-43799

Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize exte

5.5
CVE-2023-44210

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

7.8
CVE-2023-44209

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec

7.8
CVE-2023-42824 KEV

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may

8.8
CVE-2023-5217 KEV

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo

5.3
CVE-2023-44216

PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that

7.5
CVE-2023-44153

Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are

9.1
CVE-2023-44152

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: A

5.5
CVE-2023-41996

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6. Apps that fail verification che

7.8
CVE-2023-41995

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS

Frequently Asked Questions

How many CVEs affect Apple?

Apple has 28,601 CVE records in our database, including 1791 critical and 14441 high severity vulnerabilities. 117 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Apple vulnerabilities?

Apple has 1791 critical severity (CVSS 9.0+) and 14441 high severity (CVSS 7.0-8.9) vulnerabilities. 117 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Apple vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Apple products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Apple Vulnerabilities

CyberStrike scans your infrastructure for Apple vulnerabilities and provides real-time remediation guidance.

Get Started