Share of each bar's KEVs linked to ransomware. Thresholds track the catalog average of 20.9%, so they stay meaningful as it grows. Bars under 5 KEVs are left uncoloured — too few to rate a share.
Share of each bar's KEVs linked to ransomware. Thresholds track the catalog average of 20.9%, so they stay meaningful as it grows. Bars under 5 KEVs are left uncoloured — too few to rate a share.
| CVE | Vendor | Product | Vulnerability | CVSS | Added | Due per BOD 22-01 | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2026-65400 | Apple | macOS | Apple macOS Improper Authentication Vulnerability Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials. | 9.8 CISA | 2026-08-18 | 2026-08-21 | Unknown |
| CVE-2025-31277 | Apple | Multiple Products | Apple Multiple Products Buffer Overflow Vulnerability Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption. | 8.8 CISA | 2026-03-20 | 2026-04-03 | Unknown |
| CVE-2025-43520 | Apple | Multiple Products | Apple Multiple Products Classic Buffer Overflow Vulnerability Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory. | 5.5 CISA | 2026-03-20 | 2026-04-03 | Unknown |
| CVE-2025-43510 | Apple | Multiple Products | Apple Multiple Products Improper Locking Vulnerability Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes. | 7.8 CISA | 2026-03-20 | 2026-04-03 | Unknown |
| CVE-2023-41974 | Apple | iOS and iPadOS | Apple iOS and iPadOS Use-After-Free Vulnerability Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges. | 7.8 CISA | 2026-03-05 | 2026-03-26 | Unknown |
| CVE-2021-30952 | Apple | Multiple Products | Apple Multiple Products Integer Overflow or Wraparound Vulnerability Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution. | 8.8 CISA | 2026-03-05 | 2026-03-26 | Unknown |
| CVE-2023-43000 | Apple | Multiple Products | Apple Multiple products Use-After-Free Vulnerability Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption. | 8.8 CISA | 2026-03-05 | 2026-03-26 | Unknown |
| CVE-2026-20700 | Apple | Multiple Products | Apple Multiple Buffer Overflow Vulnerability Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code. | 7.8 CISA | 2026-02-12 | 2026-03-05 | Unknown |
| CVE-2025-43529 | Apple | Multiple Products | Apple Multiple Products Use-After-Free WebKit Vulnerability Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 8.8 CISA | 2025-12-15 | 2026-01-05 | Unknown |
| CVE-2022-48503 | Apple | Multiple Products | Apple Multiple Products Unspecified Vulnerability Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | 8.8 CISA | 2025-10-20 | 2025-11-10 | Unknown |
| CVE-2025-43300 | Apple | iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework. | 10.0 CISA | 2025-08-21 | 2025-09-11 | Unknown |
| CVE-2025-43200 | Apple | Multiple Products | Apple Multiple Products Unspecified Vulnerability Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link. | 4.2 CISA | 2025-06-16 | 2025-07-07 | Unknown |
| CVE-2025-31200 | Apple | Multiple Products | Apple Multiple Products Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file. | 9.8 CISA | 2025-04-17 | 2025-05-08 | Unknown |
| CVE-2025-31201 | Apple | Multiple Products | Apple Multiple Products Arbitrary Read and Write Vulnerability Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication. | 9.8 CISA | 2025-04-17 | 2025-05-08 | Unknown |
| CVE-2025-24201 | Apple | Multiple Products | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 10.0 CISA | 2025-03-13 | 2025-04-03 | Unknown |
| CVE-2025-24200 | Apple | iOS and iPadOS | Apple iOS and iPadOS Incorrect Authorization Vulnerability Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device. | 6.1 CISA | 2025-02-12 | 2025-03-05 | Unknown |
| CVE-2025-24085 | Apple | Multiple Products | Apple Multiple Products Use-After-Free Vulnerability Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges. | 10.0 CISA | 2025-01-29 | 2025-02-19 | Unknown |
| CVE-2024-44308 | Apple | Multiple Products | Apple Multiple Products Code Execution Vulnerability Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution. | 8.8 CISA | 2024-11-21 | 2024-12-12 | Unknown |
| CVE-2024-44309 | Apple | Multiple Products | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack. | 6.3 CISA | 2024-11-21 | 2024-12-12 | Unknown |
| CVE-2024-23296 | Apple | Multiple Products | Apple Multiple Products Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections. | 7.8 CISA | 2024-03-06 | 2024-03-27 | Unknown |
| CVE-2024-23225 | Apple | Multiple Products | Apple Multiple Products Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections. | 7.8 CISA | 2024-03-06 | 2024-03-27 | Unknown |
| CVE-2022-48618 | Apple | Multiple Products | Apple Multiple Products Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication. | 7.0 CISA | 2024-01-31 | 2024-02-21 | Unknown |
| CVE-2024-23222 | Apple | Multiple Products | Apple Multiple Products WebKit Type Confusion Vulnerability Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 8.8 CISA | 2024-01-23 | 2024-02-13 | Unknown |
| CVE-2023-41990 | Apple | Multiple Products | Apple Multiple Products Code Execution Vulnerability Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file. | 7.8 CISA | 2024-01-08 | 2024-01-29 | Unknown |
| CVE-2023-42916 | Apple | Multiple Products | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 6.5 CISA | 2023-12-04 | 2023-12-25 | Unknown |
| CVE-2023-42917 | Apple | Multiple Products | Apple Multiple Products WebKit Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 8.8 CISA | 2023-12-04 | 2023-12-25 | Unknown |
| CVE-2023-42824 | Apple | iOS and iPadOS | Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation. | 7.8 CISA | 2023-10-05 | 2023-10-26 | Unknown |
| CVE-2023-41993 | Apple | Multiple Products | Apple Multiple Products WebKit Code Execution Vulnerability Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 8.8 CISA | 2023-09-25 | 2023-10-16 | Unknown |
| CVE-2023-41992 | Apple | Multiple Products | Apple Multiple Products Kernel Privilege Escalation Vulnerability Apple iOS, iPadOS, macOS, and watchOS contain an unspecified vulnerability that allows for local privilege escalation. | 7.8 CISA | 2023-09-25 | 2023-10-16 | Unknown |
| CVE-2023-41991 | Apple | Multiple Products | Apple Multiple Products Improper Certificate Validation Vulnerability Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation. | 5.5 CISA | 2023-09-25 | 2023-10-16 | Unknown |
| CVE-2023-41061 | Apple | iOS, iPadOS, and watchOS | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064. | 7.8 CISA | 2023-09-11 | 2023-10-02 | Unknown |
| CVE-2023-41064 | Apple | iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061. | 7.8 CISA | 2023-09-11 | 2023-10-02 | Unknown |
| CVE-2023-38606 | Apple | Multiple Products | Apple Multiple Products Kernel Unspecified Vulnerability Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability allowing an app to modify a sensitive kernel state. | 5.5 CISA | 2023-07-26 | 2023-08-16 | Unknown |
| CVE-2023-37450 | Apple | Multiple Products | Apple Multiple Products WebKit Code Execution Vulnerability Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 8.8 CISA | 2023-07-13 | 2023-08-03 | Unknown |
| CVE-2023-32439 | Apple | Multiple Products | Apple Multiple Products WebKit Type Confusion Vulnerability Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 8.8 CISA | 2023-06-23 | 2023-07-14 | Unknown |
| CVE-2023-32435 | Apple | Multiple Products | Apple Multiple Products WebKit Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 8.8 CISA | 2023-06-23 | 2023-07-14 | Unknown |
| CVE-2023-32434 | Apple | Multiple Products | Apple Multiple Products Integer Overflow Vulnerability Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges. | 7.8 CISA | 2023-06-23 | 2023-07-14 | Unknown |
| CVE-2023-32373 | Apple | Multiple Products | Apple Multiple Products WebKit Use-After-Free Vulnerability Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 8.8 CISA | 2023-05-22 | 2023-06-12 | Unknown |
| CVE-2023-28204 | Apple | Multiple Products | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 6.5 CISA | 2023-05-22 | 2023-06-12 | Unknown |
| CVE-2023-32409 | Apple | Multiple Products | Apple Multiple Products WebKit Sandbox Escape Vulnerability Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break out of the Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 8.6 CISA | 2023-05-22 | 2023-06-12 | Unknown |
| CVE-2019-8526 | Apple | macOS | Apple macOS Use-After-Free Vulnerability Apple macOS contains a use-after-free vulnerability that could allow for privilege escalation. | 7.8 CISA | 2023-04-17 | 2023-05-08 | Unknown |
| CVE-2023-28206 | Apple | iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges. | 8.6 CISA | 2023-04-10 | 2023-05-01 | Unknown |
| CVE-2023-28205 | Apple | Multiple Products | Apple Multiple Products WebKit Use-After-Free Vulnerability Apple iOS, iPadOS, macOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 8.8 CISA | 2023-04-10 | 2023-05-01 | Unknown |
| CVE-2021-30900 | Apple | iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Apple GPU drivers, included in iOS, iPadOS, and macOS, contain an out-of-bounds write vulnerability that may allow a malicious application to execute code with kernel privileges. | 7.8 CISA | 2023-03-30 | 2023-04-20 | Unknown |
| CVE-2023-23529 | Apple | Multiple Products | Apple Multiple Products WebKit Type Confusion Vulnerability Apple iOS, MacOS, Safari and iPadOS WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | 8.8 CISA | 2023-02-14 | 2023-03-07 | Unknown |
| CVE-2022-42856 | Apple | iOS | Apple iOS Type Confusion Vulnerability Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution. | 8.8 CISA | 2022-12-14 | 2023-01-04 | Unknown |
| CVE-2022-42827 | Apple | iOS and iPadOS | Apple iOS and iPadOS Out-of-Bounds Write Vulnerability Apple iOS and iPadOS kernel contain an out-of-bounds write vulnerability which can allow an application to perform code execution with kernel privileges. | 7.8 CISA | 2022-10-25 | 2022-11-15 | Unknown |
| CVE-2022-32917 | Apple | iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges. | 7.8 CISA | 2022-09-14 | 2022-10-05 | Unknown |
| CVE-2020-9934 | Apple | iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Input Validation Vulnerability Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information. | 5.5 CISA | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2021-31010 | Apple | iOS, macOS, watchOS | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions. | 7.5 CISA | 2022-08-25 | 2022-09-15 | Unknown |