{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Apple vulnerabilities","home_page_url":"https://patchfirst.co/vendor/apple/","feed_url":"https://patchfirst.co/feed/vendor/apple.json","description":"New and newly exploited Apple CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-86868","url":"https://patchfirst.co/cve/CVE-2026-86868/","title":"CVE-2026-86868: An authentication issue was addressed with improved state management","content_text":"Apple · macOS. Not in CISA KEV. EPSS 0.5% (higher than 42% of CVEs). CVSS 9.1 CRITICAL. Priority 16.5 of 100.","summary":"An authentication issue was addressed with improved state management","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-29T18:17:35.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.5,"kev":null,"epss":{"score":0.00487,"percentile":0.41961},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Apple","product":"macOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-86950#kev","url":"https://patchfirst.co/cve/CVE-2026-86950/","title":"[KEV] CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2026-09-29. ENISA EUVD lists it as exploited. EPSS 26.2% (higher than 98% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1059 Command and Scripting Interpreter. Priority 78.8 of 100.","summary":"Apple Multiple Products Out-of-Bounds Write Vulnerability","date_published":"2026-09-29T00:00:00.000Z","date_modified":"2026-10-27T12:29:30.000Z","tags":["kev","public-exploit","T1204.002","T1059"],"_patchfirst":{"reason":"kev","priority":78.8,"kev":{"dateAdded":"2026-09-29","ransomware":false},"epss":{"score":0.26166,"percentile":0.97992},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1204.002","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-65400#kev","url":"https://patchfirst.co/cve/CVE-2026-65400/","title":"[KEV] CVE-2026-65400: Apple macOS Improper Authentication Vulnerability","content_text":"Apple · macOS. In CISA KEV since 2026-08-18. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1021 Remote Services. Priority 75.4 of 100.","summary":"Apple macOS Improper Authentication Vulnerability","date_published":"2026-08-18T00:00:00.000Z","date_modified":"2026-10-24T16:10:00.000Z","tags":["kev","public-exploit","T1133","T1021"],"_patchfirst":{"reason":"kev","priority":75.4,"kev":{"dateAdded":"2026-08-18","ransomware":false},"epss":{"score":0.01723,"percentile":0.77487},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Apple","product":"macOS","techniqueIds":["T1133","T1021"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-31277#kev","url":"https://patchfirst.co/cve/CVE-2025-31277/","title":"[KEV] CVE-2025-31277: Apple Multiple Products Buffer Overflow Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 76.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.5 of 100.","summary":"Apple Multiple Products Buffer Overflow Vulnerability","date_published":"2026-03-20T00:00:00.000Z","date_modified":"2026-09-21T17:17:25.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":69.5,"kev":{"dateAdded":"2026-03-20","ransomware":false},"epss":{"score":0.01678,"percentile":0.7688},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-43520#kev","url":"https://patchfirst.co/cve/CVE-2025-43520/","title":"[KEV] CVE-2025-43520: Apple Multiple Products Classic Buffer Overflow Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 36.8% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 59.2 of 100.","summary":"Apple Multiple Products Classic Buffer Overflow Vulnerability","date_published":"2026-03-20T00:00:00.000Z","date_modified":"2026-10-07T11:10:00.000Z","tags":["kev","public-exploit","T1204.002","T1068","T1499.004"],"_patchfirst":{"reason":"kev","priority":59.2,"kev":{"dateAdded":"2026-03-20","ransomware":false},"epss":{"score":0.00425,"percentile":0.36797},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1204.002","T1068","T1499.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-43510#kev","url":"https://patchfirst.co/cve/CVE-2025-43510/","title":"[KEV] CVE-2025-43510: Apple Multiple Products Improper Locking Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 29.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1068 Exploitation for Privilege Escalation. Priority 54.3 of 100.","summary":"Apple Multiple Products Improper Locking Vulnerability","date_published":"2026-03-20T00:00:00.000Z","date_modified":"2026-10-07T11:10:00.000Z","tags":["kev","T1204.002","T1068"],"_patchfirst":{"reason":"kev","priority":54.3,"kev":{"dateAdded":"2026-03-20","ransomware":false},"epss":{"score":0.00355,"percentile":0.29265},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1204.002","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-43000#kev","url":"https://patchfirst.co/cve/CVE-2023-43000/","title":"[KEV] CVE-2023-43000: Apple Multiple products Use-After-Free Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2026-03-05. ENISA EUVD lists it as exploited. EPSS 4.0% (higher than 90.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 72.3 of 100.","summary":"Apple Multiple products Use-After-Free Vulnerability","date_published":"2026-03-05T00:00:00.000Z","date_modified":"2026-10-28T19:10:00.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":72.3,"kev":{"dateAdded":"2026-03-05","ransomware":false},"epss":{"score":0.04042,"percentile":0.90606},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-30952#kev","url":"https://patchfirst.co/cve/CVE-2021-30952/","title":"[KEV] CVE-2021-30952: Apple Multiple Products Integer Overflow or Wraparound Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2026-03-05. ENISA EUVD lists it as exploited. EPSS 7.0% (higher than 94.1% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 72.3 of 100.","summary":"Apple Multiple Products Integer Overflow or Wraparound Vulnerability","date_published":"2026-03-05T00:00:00.000Z","date_modified":"2026-06-17T03:51:12.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":72.3,"kev":{"dateAdded":"2026-03-05","ransomware":false},"epss":{"score":0.06964,"percentile":0.9412},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-41974#kev","url":"https://patchfirst.co/cve/CVE-2023-41974/","title":"[KEV] CVE-2023-41974: Apple iOS and iPadOS Use-After-Free Vulnerability","content_text":"Apple · iOS and iPadOS. In CISA KEV since 2026-03-05. ENISA EUVD lists it as exploited. EPSS 2.0% (higher than 80.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1068 Exploitation for Privilege Escalation. Priority 69.5 of 100.","summary":"Apple iOS and iPadOS Use-After-Free Vulnerability","date_published":"2026-03-05T00:00:00.000Z","date_modified":"2026-06-17T06:23:10.000Z","tags":["kev","public-exploit","T1204.002","T1068"],"_patchfirst":{"reason":"kev","priority":69.5,"kev":{"dateAdded":"2026-03-05","ransomware":false},"epss":{"score":0.01955,"percentile":0.80242},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"iOS and iPadOS","techniqueIds":["T1204.002","T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-20700#kev","url":"https://patchfirst.co/cve/CVE-2026-20700/","title":"[KEV] CVE-2026-20700: Apple Multiple Buffer Overflow Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2026-02-12. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 76.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 68.8 of 100.","summary":"Apple Multiple Buffer Overflow Vulnerability","date_published":"2026-02-12T00:00:00.000Z","date_modified":"2026-06-17T10:17:43.000Z","tags":["kev","public-exploit","T1068","T1059"],"_patchfirst":{"reason":"kev","priority":68.8,"kev":{"dateAdded":"2026-02-12","ransomware":false},"epss":{"score":0.01679,"percentile":0.7689},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1068","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-43529","url":"https://patchfirst.co/cve/CVE-2025-43529/","title":"CVE-2025-43529: Apple Multiple Products Use-After-Free WebKit Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2025-12-15. ENISA EUVD lists it as exploited. EPSS 25.7% (higher than 98% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 73.8 of 100.","summary":"Apple Multiple Products Use-After-Free WebKit Vulnerability","date_published":"2025-12-17T00:00:00.000Z","date_modified":"2026-10-07T11:10:00.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"published","priority":73.8,"kev":{"dateAdded":"2025-12-15","ransomware":false},"epss":{"score":0.2565,"percentile":0.9796},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-43542","url":"https://patchfirst.co/cve/CVE-2025-43542/","title":"CVE-2025-43542: This issue was addressed with improved state management","content_text":"Apple · iOS and iPadOS. Not in CISA KEV. EPSS 0.9% (higher than 58.4% of CVEs). CVSS 7.5 HIGH. Priority 58.5 of 100.","summary":"This issue was addressed with improved state management","date_published":"2025-12-12T00:00:00.000Z","date_modified":"2026-04-02T18:23:41.000Z","tags":[],"_patchfirst":{"reason":"published","priority":58.5,"kev":null,"epss":{"score":0.00857,"percentile":0.58391},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"iOS and iPadOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-43512","url":"https://patchfirst.co/cve/CVE-2025-43512/","title":"CVE-2025-43512: A logic issue was addressed with improved checks","content_text":"Apple · iOS and iPadOS. Not in CISA KEV. EPSS 0.2% (higher than 7.8% of CVEs). CVSS 7.8 HIGH. Priority 48.6 of 100.","summary":"A logic issue was addressed with improved checks","date_published":"2025-12-12T00:00:00.000Z","date_modified":"2026-04-02T18:22:20.000Z","tags":[],"_patchfirst":{"reason":"published","priority":48.6,"kev":null,"epss":{"score":0.00182,"percentile":0.07831},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"iOS and iPadOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-43532","url":"https://patchfirst.co/cve/CVE-2025-43532/","title":"CVE-2025-43532: A memory corruption issue was addressed with improved bounds checking","content_text":"Apple · iOS and iPadOS. Not in CISA KEV. EPSS 0.3% (higher than 19.9% of CVEs). CVSS 2.8 LOW. Priority 47.5 of 100.","summary":"A memory corruption issue was addressed with improved bounds checking","date_published":"2025-12-12T00:00:00.000Z","date_modified":"2026-04-02T18:20:07.000Z","tags":[],"_patchfirst":{"reason":"published","priority":47.5,"kev":null,"epss":{"score":0.00274,"percentile":0.19865},"cvss":{"score":2.8,"severity":"LOW","version":"3.1"},"vendor":"Apple","product":"iOS and iPadOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-46289","url":"https://patchfirst.co/cve/CVE-2025-46289/","title":"CVE-2025-46289: A logic issue was addressed with improved file handling","content_text":"Apple · macOS. Not in CISA KEV. EPSS 0.2% (higher than 10.3% of CVEs). CVSS 5.5 MEDIUM. Priority 47.5 of 100.","summary":"A logic issue was addressed with improved file handling","date_published":"2025-12-12T00:00:00.000Z","date_modified":"2026-04-02T18:15:42.000Z","tags":[],"_patchfirst":{"reason":"published","priority":47.5,"kev":null,"epss":{"score":0.00203,"percentile":0.1028},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"macOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-43482","url":"https://patchfirst.co/cve/CVE-2025-43482/","title":"CVE-2025-43482: The issue was addressed with improved input validation","content_text":"Apple · macOS. Not in CISA KEV. EPSS 0.2% (higher than 9.6% of CVEs). CVSS 5.5 MEDIUM. Priority 47.4 of 100.","summary":"The issue was addressed with improved input validation","date_published":"2025-12-12T00:00:00.000Z","date_modified":"2026-04-02T18:21:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":47.4,"kev":null,"epss":{"score":0.00198,"percentile":0.09642},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"macOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-43517","url":"https://patchfirst.co/cve/CVE-2025-43517/","title":"CVE-2025-43517: A privacy issue was addressed with improved private data redaction for log entries","content_text":"Apple · macOS. Not in CISA KEV. EPSS 0.2% (higher than 7.5% of CVEs). CVSS 3.3 LOW. Priority 45.4 of 100.","summary":"A privacy issue was addressed with improved private data redaction for log entries","date_published":"2025-12-12T00:00:00.000Z","date_modified":"2026-04-02T18:09:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":45.4,"kev":null,"epss":{"score":0.00179,"percentile":0.07494},"cvss":{"score":3.3,"severity":"LOW","version":"3.1"},"vendor":"Apple","product":"macOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2022-48503#kev","url":"https://patchfirst.co/cve/CVE-2022-48503/","title":"[KEV] CVE-2022-48503: Apple Multiple Products Unspecified Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2025-10-20. ENISA EUVD lists it as exploited. EPSS 3.2% (higher than 88.2% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 61.8 of 100.","summary":"Apple Multiple Products Unspecified Vulnerability","date_published":"2025-10-20T00:00:00.000Z","date_modified":"2026-06-17T05:15:33.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":61.8,"kev":{"dateAdded":"2025-10-20","ransomware":false},"epss":{"score":0.03213,"percentile":0.88175},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-43300#kev","url":"https://patchfirst.co/cve/CVE-2025-43300/","title":"[KEV] CVE-2025-43300: Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","content_text":"Apple · iOS, iPadOS, and macOS. In CISA KEV since 2025-08-21. ENISA EUVD lists it as exploited. EPSS 65.2% (higher than 99.25% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 69.9 of 100.","summary":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","date_published":"2025-08-21T00:00:00.000Z","date_modified":"2026-06-17T09:23:42.000Z","tags":["kev","public-exploit"],"_patchfirst":{"reason":"kev","priority":69.9,"kev":{"dateAdded":"2025-08-21","ransomware":false},"epss":{"score":0.65159,"percentile":0.99252},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Apple","product":"iOS, iPadOS, and macOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-43200#kev","url":"https://patchfirst.co/cve/CVE-2025-43200/","title":"[KEV] CVE-2025-43200: Apple Multiple Products Unspecified Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2025-06-16. ENISA EUVD lists it as exploited. EPSS 1.2% (higher than 67.9% of CVEs). CVSS 4.2 MEDIUM. ATT&CK: T1203 Exploitation for Client Execution; T1105 Ingress Tool Transfer; T1005 Data from Local System. Priority 54.5 of 100.","summary":"Apple Multiple Products Unspecified Vulnerability","date_published":"2025-06-16T00:00:00.000Z","date_modified":"2026-09-24T13:10:00.000Z","tags":["kev","T1203","T1105","T1005"],"_patchfirst":{"reason":"kev","priority":54.5,"kev":{"dateAdded":"2025-06-16","ransomware":false},"epss":{"score":0.01191,"percentile":0.67933},"cvss":{"score":4.2,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1203","T1105","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-31200#kev","url":"https://patchfirst.co/cve/CVE-2025-31200/","title":"[KEV] CVE-2025-31200: Apple Multiple Products Memory Corruption Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2025-04-17. ENISA EUVD lists it as exploited. EPSS 20.9% (higher than 97.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1105 Ingress Tool Transfer; T1001 Data Obfuscation; T1059 Command and Scripting Interpreter; T1106 Native API; T1557 Adversary-in-the-Middle. Priority 69.4 of 100.","summary":"Apple Multiple Products Memory Corruption Vulnerability","date_published":"2025-04-17T00:00:00.000Z","date_modified":"2026-06-17T09:10:00.000Z","tags":["kev","public-exploit","T1105","T1001","T1059","T1106","T1557"],"_patchfirst":{"reason":"kev","priority":69.4,"kev":{"dateAdded":"2025-04-17","ransomware":false},"epss":{"score":0.20898,"percentile":0.97554},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1105","T1001","T1059","T1106","T1557"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-31201#kev","url":"https://patchfirst.co/cve/CVE-2025-31201/","title":"[KEV] CVE-2025-31201: Apple Multiple Products Arbitrary Read and Write Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2025-04-17. ENISA EUVD lists it as exploited. EPSS 14.0% (higher than 96.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1105 Ingress Tool Transfer; T1001 Data Obfuscation; T1059 Command and Scripting Interpreter; T1106 Native API; T1557 Adversary-in-the-Middle. Priority 69.2 of 100.","summary":"Apple Multiple Products Arbitrary Read and Write Vulnerability","date_published":"2025-04-17T00:00:00.000Z","date_modified":"2026-06-17T09:10:00.000Z","tags":["kev","public-exploit","T1105","T1001","T1059","T1106","T1557"],"_patchfirst":{"reason":"kev","priority":69.2,"kev":{"dateAdded":"2025-04-17","ransomware":false},"epss":{"score":0.13973,"percentile":0.96545},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1105","T1001","T1059","T1106","T1557"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-24201#kev","url":"https://patchfirst.co/cve/CVE-2025-24201/","title":"[KEV] CVE-2025-24201: Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2025-03-13. ENISA EUVD lists it as exploited. EPSS 3.8% (higher than 90.1% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter. Priority 68.0 of 100.","summary":"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","date_published":"2025-03-13T00:00:00.000Z","date_modified":"2026-06-17T08:58:17.000Z","tags":["kev","public-exploit","T1059"],"_patchfirst":{"reason":"kev","priority":68,"kev":{"dateAdded":"2025-03-13","ransomware":false},"epss":{"score":0.03847,"percentile":0.90121},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-8900","url":"https://patchfirst.co/cve/CVE-2019-8900/","title":"CVE-2019-8900: A vulnerability in the SecureROM of some Apple devices can be exploited by an unauthenticated local attacker to…","content_text":"Apple · SecureROM. Not in CISA KEV. EPSS 69.5% (higher than 99.36% of CVEs). CVSS 6.8 MEDIUM. Public exploit code exists. Priority 30.3 of 100.","summary":"A vulnerability in the SecureROM of some Apple devices can be exploited by an unauthenticated local attacker to…","date_published":"2025-02-21T00:00:00.000Z","date_modified":"2025-02-22T15:42:26.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":30.3,"kev":null,"epss":{"score":0.69521,"percentile":0.99361},"cvss":{"score":6.8,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"SecureROM","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-24200#kev","url":"https://patchfirst.co/cve/CVE-2025-24200/","title":"[KEV] CVE-2025-24200: Apple iOS and iPadOS Incorrect Authorization Vulnerability","content_text":"Apple · iOS and iPadOS. In CISA KEV since 2025-02-12. ENISA EUVD lists it as exploited. EPSS 4.5% (higher than 91.4% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1211 Exploitation for Stealth; T1005 Data from Local System. Priority 60.6 of 100.","summary":"Apple iOS and iPadOS Incorrect Authorization Vulnerability","date_published":"2025-02-12T00:00:00.000Z","date_modified":"2026-06-17T08:58:17.000Z","tags":["kev","T1211","T1005"],"_patchfirst":{"reason":"kev","priority":60.6,"kev":{"dateAdded":"2025-02-12","ransomware":false},"epss":{"score":0.04457,"percentile":0.91418},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"iOS and iPadOS","techniqueIds":["T1211","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-24085#kev","url":"https://patchfirst.co/cve/CVE-2025-24085/","title":"[KEV] CVE-2025-24085: Apple Multiple Products Use-After-Free Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2025-01-29. ENISA EUVD lists it as exploited. EPSS 17.5% (higher than 97.1% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 69.4 of 100.","summary":"Apple Multiple Products Use-After-Free Vulnerability","date_published":"2025-01-29T00:00:00.000Z","date_modified":"2026-06-17T08:58:02.000Z","tags":["kev","public-exploit","T1068","T1059"],"_patchfirst":{"reason":"kev","priority":69.4,"kev":{"dateAdded":"2025-01-29","ransomware":false},"epss":{"score":0.1751,"percentile":0.97132},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1068","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-24113","url":"https://patchfirst.co/cve/CVE-2025-24113/","title":"CVE-2025-24113: The issue was addressed with improved UI","content_text":"Apple · Safari. Not in CISA KEV. EPSS 0.8% (higher than 56.7% of CVEs). CVSS 4.3 MEDIUM. Priority 55.7 of 100.","summary":"The issue was addressed with improved UI","date_published":"2025-01-27T00:00:00.000Z","date_modified":"2026-04-02T18:08:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":55.7,"kev":null,"epss":{"score":0.00803,"percentile":0.56665},"cvss":{"score":4.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"Safari","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-44308#kev","url":"https://patchfirst.co/cve/CVE-2024-44308/","title":"[KEV] CVE-2024-44308: Apple Multiple Products Code Execution Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-11-21. ENISA EUVD lists it as exploited. EPSS 9.9% (higher than 95.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.3 of 100.","summary":"Apple Multiple Products Code Execution Vulnerability","date_published":"2024-11-21T00:00:00.000Z","date_modified":"2026-06-17T07:52:45.000Z","tags":["kev","public-exploit","T1189","T1203"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2024-11-21","ransomware":false},"epss":{"score":0.09852,"percentile":0.95556},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1203"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-44309#kev","url":"https://patchfirst.co/cve/CVE-2024-44309/","title":"[KEV] CVE-2024-44309: Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-11-21. ENISA EUVD lists it as exploited. EPSS 21.9% (higher than 97.7% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 61.9 of 100.","summary":"Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","date_published":"2024-11-21T00:00:00.000Z","date_modified":"2026-06-17T07:52:45.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":61.9,"kev":{"dateAdded":"2024-11-21","ransomware":false},"epss":{"score":0.21948,"percentile":0.97651},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-44258","url":"https://patchfirst.co/cve/CVE-2024-44258/","title":"CVE-2024-44258: This issue was addressed with improved handling of symlinks","content_text":"Apple · iOS and iPadOS. Not in CISA KEV. EPSS 0.8% (higher than 55% of CVEs). CVSS 7.1 HIGH. Public exploit code exists. Priority 57.3 of 100.","summary":"This issue was addressed with improved handling of symlinks","date_published":"2024-10-28T00:00:00.000Z","date_modified":"2026-04-02T18:12:19.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":57.3,"kev":null,"epss":{"score":0.00751,"percentile":0.54957},"cvss":{"score":7.1,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"iOS and iPadOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-23296#kev","url":"https://patchfirst.co/cve/CVE-2024-23296/","title":"[KEV] CVE-2024-23296: Apple Multiple Products Memory Corruption Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-03-06. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 72.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 63.0 of 100.","summary":"Apple Multiple Products Memory Corruption Vulnerability","date_published":"2024-03-06T00:00:00.000Z","date_modified":"2026-06-17T07:12:32.000Z","tags":["kev","public-exploit","T1068","T1211"],"_patchfirst":{"reason":"kev","priority":63,"kev":{"dateAdded":"2024-03-06","ransomware":false},"epss":{"score":0.01411,"percentile":0.72651},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1068","T1211"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-23225#kev","url":"https://patchfirst.co/cve/CVE-2024-23225/","title":"[KEV] CVE-2024-23225: Apple Multiple Products Memory Corruption Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-03-06. ENISA EUVD lists it as exploited. EPSS 1.5% (higher than 73.9% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 58.2 of 100.","summary":"Apple Multiple Products Memory Corruption Vulnerability","date_published":"2024-03-06T00:00:00.000Z","date_modified":"2026-06-17T07:12:20.000Z","tags":["kev","T1068","T1211"],"_patchfirst":{"reason":"kev","priority":58.2,"kev":{"dateAdded":"2024-03-06","ransomware":false},"epss":{"score":0.01481,"percentile":0.73909},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1068","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-48618#kev","url":"https://patchfirst.co/cve/CVE-2022-48618/","title":"[KEV] CVE-2022-48618: Apple Multiple Products Memory Corruption Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-01-31. ENISA EUVD lists it as exploited. EPSS 0.5% (higher than 41.9% of CVEs). CVSS 7.0 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 51.3 of 100.","summary":"Apple Multiple Products Memory Corruption Vulnerability","date_published":"2024-01-31T00:00:00.000Z","date_modified":"2026-06-17T05:15:43.000Z","tags":["kev","T1068","T1211"],"_patchfirst":{"reason":"kev","priority":51.3,"kev":{"dateAdded":"2024-01-31","ransomware":false},"epss":{"score":0.00487,"percentile":0.41919},"cvss":{"score":7,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1068","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-23222#kev","url":"https://patchfirst.co/cve/CVE-2024-23222/","title":"[KEV] CVE-2024-23222: Apple Multiple Products WebKit Type Confusion Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-01-23. ENISA EUVD lists it as exploited. EPSS 10.6% (higher than 95.8% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 68.3 of 100.","summary":"Apple Multiple Products WebKit Type Confusion Vulnerability","date_published":"2024-01-23T00:00:00.000Z","date_modified":"2026-06-17T07:12:19.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2024-01-23","ransomware":false},"epss":{"score":0.10593,"percentile":0.95777},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-41990#kev","url":"https://patchfirst.co/cve/CVE-2023-41990/","title":"[KEV] CVE-2023-41990: Apple Multiple Products Code Execution Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2024-01-08. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 72.2% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1059 Command and Scripting Interpreter. Priority 57.9 of 100.","summary":"Apple Multiple Products Code Execution Vulnerability","date_published":"2024-01-08T00:00:00.000Z","date_modified":"2026-06-17T06:23:12.000Z","tags":["kev","T1204.002","T1059"],"_patchfirst":{"reason":"kev","priority":57.9,"kev":{"dateAdded":"2024-01-08","ransomware":false},"epss":{"score":0.01388,"percentile":0.72238},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1204.002","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-42917#kev","url":"https://patchfirst.co/cve/CVE-2023-42917/","title":"[KEV] CVE-2023-42917: Apple Multiple Products WebKit Memory Corruption Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-12-04. ENISA EUVD lists it as exploited. EPSS 9.3% (higher than 95.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.2 of 100.","summary":"Apple Multiple Products WebKit Memory Corruption Vulnerability","date_published":"2023-12-04T00:00:00.000Z","date_modified":"2026-06-17T06:24:49.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":63.2,"kev":{"dateAdded":"2023-12-04","ransomware":false},"epss":{"score":0.09295,"percentile":0.95362},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-42916#kev","url":"https://patchfirst.co/cve/CVE-2023-42916/","title":"[KEV] CVE-2023-42916: Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-12-04. ENISA EUVD lists it as exploited. EPSS 17.8% (higher than 97.2% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1005 Data from Local System. Priority 62.0 of 100.","summary":"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","date_published":"2023-12-04T00:00:00.000Z","date_modified":"2026-06-17T06:24:49.000Z","tags":["kev","T1189","T1005"],"_patchfirst":{"reason":"kev","priority":62,"kev":{"dateAdded":"2023-12-04","ransomware":false},"epss":{"score":0.17823,"percentile":0.97166},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-42824#kev","url":"https://patchfirst.co/cve/CVE-2023-42824/","title":"[KEV] CVE-2023-42824: Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability","content_text":"Apple · iOS and iPadOS. In CISA KEV since 2023-10-05. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 61.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 60.8 of 100.","summary":"Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability","date_published":"2023-10-05T00:00:00.000Z","date_modified":"2026-06-17T06:24:36.000Z","tags":["kev","public-exploit","T1068","T1548"],"_patchfirst":{"reason":"kev","priority":60.8,"kev":{"dateAdded":"2023-10-05","ransomware":false},"epss":{"score":0.00971,"percentile":0.61879},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"iOS and iPadOS","techniqueIds":["T1068","T1548"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-41993#kev","url":"https://patchfirst.co/cve/CVE-2023-41993/","title":"[KEV] CVE-2023-41993: Apple Multiple Products WebKit Code Execution Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-09-25. ENISA EUVD lists it as exploited. EPSS 24.3% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 68.7 of 100.","summary":"Apple Multiple Products WebKit Code Execution Vulnerability","date_published":"2023-09-25T00:00:00.000Z","date_modified":"2026-06-17T06:23:13.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":68.7,"kev":{"dateAdded":"2023-09-25","ransomware":false},"epss":{"score":0.24349,"percentile":0.97863},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-41992#kev","url":"https://patchfirst.co/cve/CVE-2023-41992/","title":"[KEV] CVE-2023-41992: Apple Multiple Products Kernel Privilege Escalation Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-09-25. ENISA EUVD lists it as exploited. EPSS 9.5% (higher than 95.4% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 67.5 of 100.","summary":"Apple Multiple Products Kernel Privilege Escalation Vulnerability","date_published":"2023-09-25T00:00:00.000Z","date_modified":"2026-06-17T06:23:13.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":67.5,"kev":{"dateAdded":"2023-09-25","ransomware":false},"epss":{"score":0.09515,"percentile":0.95443},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-41991#kev","url":"https://patchfirst.co/cve/CVE-2023-41991/","title":"[KEV] CVE-2023-41991: Apple Multiple Products Improper Certificate Validation Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-09-25. ENISA EUVD lists it as exploited. EPSS 13.4% (higher than 96.4% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1553.002 Code Signing. Priority 66.1 of 100.","summary":"Apple Multiple Products Improper Certificate Validation Vulnerability","date_published":"2023-09-25T00:00:00.000Z","date_modified":"2026-06-17T06:23:13.000Z","tags":["kev","public-exploit","T1204.002","T1553.002"],"_patchfirst":{"reason":"kev","priority":66.1,"kev":{"dateAdded":"2023-09-25","ransomware":false},"epss":{"score":0.1338,"percentile":0.96415},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1204.002","T1553.002"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-41064#kev","url":"https://patchfirst.co/cve/CVE-2023-41064/","title":"[KEV] CVE-2023-41064: Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability","content_text":"Apple · iOS, iPadOS, and macOS. In CISA KEV since 2023-09-11. ENISA EUVD lists it as exploited. EPSS 53.4% (higher than 99% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1059 Command and Scripting Interpreter. Priority 68.3 of 100.","summary":"Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability","date_published":"2023-09-11T00:00:00.000Z","date_modified":"2026-06-17T06:20:22.000Z","tags":["kev","public-exploit","T1204.002","T1059"],"_patchfirst":{"reason":"kev","priority":68.3,"kev":{"dateAdded":"2023-09-11","ransomware":false},"epss":{"score":0.53403,"percentile":0.98987},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"iOS, iPadOS, and macOS","techniqueIds":["T1204.002","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-41061#kev","url":"https://patchfirst.co/cve/CVE-2023-41061/","title":"[KEV] CVE-2023-41061: Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability","content_text":"Apple · iOS, iPadOS, and watchOS. In CISA KEV since 2023-09-11. ENISA EUVD lists it as exploited. EPSS 4.4% (higher than 91.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 61.7 of 100.","summary":"Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability","date_published":"2023-09-11T00:00:00.000Z","date_modified":"2026-06-17T06:20:21.000Z","tags":["kev","T1204.001","T1059"],"_patchfirst":{"reason":"kev","priority":61.7,"kev":{"dateAdded":"2023-09-11","ransomware":false},"epss":{"score":0.04409,"percentile":0.91322},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"iOS, iPadOS, and watchOS","techniqueIds":["T1204.001","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-37450","url":"https://patchfirst.co/cve/CVE-2023-37450/","title":"CVE-2023-37450: Apple Multiple Products WebKit Code Execution Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-07-13. ENISA EUVD lists it as exploited. EPSS 18.9% (higher than 97.3% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.6 of 100.","summary":"Apple Multiple Products WebKit Code Execution Vulnerability","date_published":"2023-07-27T00:00:00.000Z","date_modified":"2026-06-17T06:08:14.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"published","priority":63.6,"kev":{"dateAdded":"2023-07-13","ransomware":false},"epss":{"score":0.1895,"percentile":0.97297},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-38606","url":"https://patchfirst.co/cve/CVE-2023-38606/","title":"CVE-2023-38606: Apple Multiple Products Kernel Unspecified Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-07-26. ENISA EUVD lists it as exploited. EPSS 2.9% (higher than 86.9% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 59.2 of 100.","summary":"Apple Multiple Products Kernel Unspecified Vulnerability","date_published":"2023-07-27T00:00:00.000Z","date_modified":"2026-06-17T06:10:49.000Z","tags":["kev","T1068","T1211"],"_patchfirst":{"reason":"published","priority":59.2,"kev":{"dateAdded":"2023-07-26","ransomware":false},"epss":{"score":0.02899,"percentile":0.86925},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1068","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-32434#kev","url":"https://patchfirst.co/cve/CVE-2023-32434/","title":"[KEV] CVE-2023-32434: Apple Multiple Products Integer Overflow Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-06-23. ENISA EUVD lists it as exploited. EPSS 51.5% (higher than 98.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 68.2 of 100.","summary":"Apple Multiple Products Integer Overflow Vulnerability","date_published":"2023-06-23T00:00:00.000Z","date_modified":"2026-06-17T05:58:49.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2023-06-23","ransomware":false},"epss":{"score":0.51517,"percentile":0.98942},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-32439#kev","url":"https://patchfirst.co/cve/CVE-2023-32439/","title":"[KEV] CVE-2023-32439: Apple Multiple Products WebKit Type Confusion Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-06-23. ENISA EUVD lists it as exploited. EPSS 24.0% (higher than 97.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.7 of 100.","summary":"Apple Multiple Products WebKit Type Confusion Vulnerability","date_published":"2023-06-23T00:00:00.000Z","date_modified":"2026-06-17T05:58:50.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":63.7,"kev":{"dateAdded":"2023-06-23","ransomware":false},"epss":{"score":0.23968,"percentile":0.97836},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-32435#kev","url":"https://patchfirst.co/cve/CVE-2023-32435/","title":"[KEV] CVE-2023-32435: Apple Multiple Products WebKit Memory Corruption Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-06-23. ENISA EUVD lists it as exploited. EPSS 23.0% (higher than 97.7% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.7 of 100.","summary":"Apple Multiple Products WebKit Memory Corruption Vulnerability","date_published":"2023-06-23T00:00:00.000Z","date_modified":"2026-06-17T05:58:50.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":63.7,"kev":{"dateAdded":"2023-06-23","ransomware":false},"epss":{"score":0.22951,"percentile":0.97745},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-32409","url":"https://patchfirst.co/cve/CVE-2023-32409/","title":"CVE-2023-32409: Apple Multiple Products WebKit Sandbox Escape Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-05-22. ENISA EUVD lists it as exploited. EPSS 16.5% (higher than 97% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1211 Exploitation for Stealth. Priority 63.4 of 100.","summary":"Apple Multiple Products WebKit Sandbox Escape Vulnerability","date_published":"2023-06-23T00:00:00.000Z","date_modified":"2026-06-17T05:58:47.000Z","tags":["kev","T1211"],"_patchfirst":{"reason":"published","priority":63.4,"kev":{"dateAdded":"2023-05-22","ransomware":false},"epss":{"score":0.1653,"percentile":0.97},"cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-32373","url":"https://patchfirst.co/cve/CVE-2023-32373/","title":"CVE-2023-32373: Apple Multiple Products WebKit Use-After-Free Vulnerability","content_text":"Apple · Multiple Products. In CISA KEV since 2023-05-22. ENISA EUVD lists it as exploited. EPSS 12.2% (higher than 96.2% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.4 of 100.","summary":"Apple Multiple Products WebKit Use-After-Free Vulnerability","date_published":"2023-06-23T00:00:00.000Z","date_modified":"2026-06-17T05:58:42.000Z","tags":["kev","T1189","T1059"],"_patchfirst":{"reason":"published","priority":63.4,"kev":{"dateAdded":"2023-05-22","ransomware":false},"epss":{"score":0.12172,"percentile":0.96153},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Apple","product":"Multiple Products","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}}]}