https://patchfirst.co/vendor/apple/New and newly exploited Apple CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 22:22:55 GMThttps://patchfirst.co/cve/CVE-2026-86868/CVE-2026-86868Tue, 20 Oct 2026 00:00:00 GMTApple · macOS. Not in CISA KEV. EPSS 0.5% (higher than 42% of CVEs). CVSS 9.1 CRITICAL. Priority 16.5 of 100.https://patchfirst.co/cve/CVE-2026-86950/CVE-2026-86950#kevTue, 29 Sep 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-09-29. ENISA EUVD lists it as exploited. EPSS 26.2% (higher than 98% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1059 Command and Scripting Interpreter. Priority 78.8 of 100.kevpublic-exploitT1204.002T1059https://patchfirst.co/cve/CVE-2026-65400/CVE-2026-65400#kevTue, 18 Aug 2026 00:00:00 GMTApple · macOS. In CISA KEV since 2026-08-18. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1021 Remote Services. Priority 75.4 of 100.kevpublic-exploitT1133T1021https://patchfirst.co/cve/CVE-2025-31277/CVE-2025-31277#kevFri, 20 Mar 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 76.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 69.5 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2025-43520/CVE-2025-43520#kevFri, 20 Mar 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 36.8% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 59.2 of 100.kevpublic-exploitT1204.002T1068T1499.004https://patchfirst.co/cve/CVE-2025-43510/CVE-2025-43510#kevFri, 20 Mar 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 29.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1068 Exploitation for Privilege Escalation. Priority 54.3 of 100.kevT1204.002T1068https://patchfirst.co/cve/CVE-2023-43000/CVE-2023-43000#kevThu, 05 Mar 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-03-05. ENISA EUVD lists it as exploited. EPSS 4.0% (higher than 90.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 72.3 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2021-30952/CVE-2021-30952#kevThu, 05 Mar 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-03-05. ENISA EUVD lists it as exploited. EPSS 7.0% (higher than 94.1% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 72.3 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2023-41974/CVE-2023-41974#kevThu, 05 Mar 2026 00:00:00 GMTApple · iOS and iPadOS. In CISA KEV since 2026-03-05. ENISA EUVD lists it as exploited. EPSS 2.0% (higher than 80.3% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1068 Exploitation for Privilege Escalation. Priority 69.5 of 100.kevpublic-exploitT1204.002T1068https://patchfirst.co/cve/CVE-2026-20700/CVE-2026-20700#kevThu, 12 Feb 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-02-12. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 76.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 68.8 of 100.kevpublic-exploitT1068T1059https://patchfirst.co/cve/CVE-2025-43529/CVE-2025-43529Wed, 17 Dec 2025 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2025-12-15. ENISA EUVD lists it as exploited. EPSS 25.7% (higher than 98% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 73.8 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2025-43542/CVE-2025-43542Fri, 12 Dec 2025 00:00:00 GMTApple · iOS and iPadOS. Not in CISA KEV. EPSS 0.9% (higher than 58.4% of CVEs). CVSS 7.5 HIGH. Priority 58.5 of 100.https://patchfirst.co/cve/CVE-2025-43512/CVE-2025-43512Fri, 12 Dec 2025 00:00:00 GMTApple · iOS and iPadOS. Not in CISA KEV. EPSS 0.2% (higher than 7.8% of CVEs). CVSS 7.8 HIGH. Priority 48.6 of 100.https://patchfirst.co/cve/CVE-2025-43532/CVE-2025-43532Fri, 12 Dec 2025 00:00:00 GMTApple · iOS and iPadOS. Not in CISA KEV. EPSS 0.3% (higher than 19.9% of CVEs). CVSS 2.8 LOW. Priority 47.5 of 100.https://patchfirst.co/cve/CVE-2025-46289/CVE-2025-46289Fri, 12 Dec 2025 00:00:00 GMTApple · macOS. Not in CISA KEV. EPSS 0.2% (higher than 10.3% of CVEs). CVSS 5.5 MEDIUM. Priority 47.5 of 100.https://patchfirst.co/cve/CVE-2025-43482/CVE-2025-43482Fri, 12 Dec 2025 00:00:00 GMTApple · macOS. Not in CISA KEV. EPSS 0.2% (higher than 9.6% of CVEs). CVSS 5.5 MEDIUM. Priority 47.4 of 100.https://patchfirst.co/cve/CVE-2025-43517/CVE-2025-43517Fri, 12 Dec 2025 00:00:00 GMTApple · macOS. Not in CISA KEV. EPSS 0.2% (higher than 7.5% of CVEs). CVSS 3.3 LOW. Priority 45.4 of 100.https://patchfirst.co/cve/CVE-2022-48503/CVE-2022-48503#kevMon, 20 Oct 2025 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2025-10-20. ENISA EUVD lists it as exploited. EPSS 3.2% (higher than 88.2% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 61.8 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2025-43300/CVE-2025-43300#kevThu, 21 Aug 2025 00:00:00 GMTApple · iOS, iPadOS, and macOS. In CISA KEV since 2025-08-21. ENISA EUVD lists it as exploited. EPSS 65.2% (higher than 99.25% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 69.9 of 100.kevpublic-exploithttps://patchfirst.co/cve/CVE-2025-43200/CVE-2025-43200#kevMon, 16 Jun 2025 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2025-06-16. ENISA EUVD lists it as exploited. EPSS 1.2% (higher than 68% of CVEs). CVSS 4.2 MEDIUM. ATT&CK: T1203 Exploitation for Client Execution; T1105 Ingress Tool Transfer; T1005 Data from Local System. Priority 54.5 of 100.kevT1203T1105T1005https://patchfirst.co/cve/CVE-2025-31200/CVE-2025-31200#kevThu, 17 Apr 2025 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2025-04-17. ENISA EUVD lists it as exploited. EPSS 20.9% (higher than 97.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1105 Ingress Tool Transfer; T1001 Data Obfuscation; T1059 Command and Scripting Interpreter; T1106 Native API; T1557 Adversary-in-the-Middle. Priority 69.4 of 100.kevpublic-exploitT1105T1001T1059T1106T1557https://patchfirst.co/cve/CVE-2025-31201/CVE-2025-31201#kevThu, 17 Apr 2025 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2025-04-17. ENISA EUVD lists it as exploited. EPSS 14.0% (higher than 96.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1105 Ingress Tool Transfer; T1001 Data Obfuscation; T1059 Command and Scripting Interpreter; T1106 Native API; T1557 Adversary-in-the-Middle. Priority 69.2 of 100.kevpublic-exploitT1105T1001T1059T1106T1557https://patchfirst.co/cve/CVE-2025-24201/CVE-2025-24201#kevThu, 13 Mar 2025 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2025-03-13. ENISA EUVD lists it as exploited. EPSS 3.8% (higher than 90.1% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter. Priority 68.0 of 100.kevpublic-exploitT1059https://patchfirst.co/cve/CVE-2019-8900/CVE-2019-8900Fri, 21 Feb 2025 00:00:00 GMTApple · SecureROM. Not in CISA KEV. EPSS 69.5% (higher than 99.36% of CVEs). CVSS 6.8 MEDIUM. Public exploit code exists. Priority 30.3 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-24200/CVE-2025-24200#kevWed, 12 Feb 2025 00:00:00 GMTApple · iOS and iPadOS. In CISA KEV since 2025-02-12. ENISA EUVD lists it as exploited. EPSS 4.5% (higher than 91.4% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1211 Exploitation for Stealth; T1005 Data from Local System. Priority 60.6 of 100.kevT1211T1005https://patchfirst.co/cve/CVE-2025-24085/CVE-2025-24085#kevWed, 29 Jan 2025 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2025-01-29. ENISA EUVD lists it as exploited. EPSS 17.5% (higher than 97.1% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 69.4 of 100.kevpublic-exploitT1068T1059https://patchfirst.co/cve/CVE-2025-24113/CVE-2025-24113Mon, 27 Jan 2025 00:00:00 GMTApple · Safari. Not in CISA KEV. EPSS 0.8% (higher than 56.7% of CVEs). CVSS 4.3 MEDIUM. Priority 55.7 of 100.https://patchfirst.co/cve/CVE-2024-44308/CVE-2024-44308#kevThu, 21 Nov 2024 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2024-11-21. ENISA EUVD lists it as exploited. EPSS 9.9% (higher than 95.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1203 Exploitation for Client Execution. Priority 68.3 of 100.kevpublic-exploitT1189T1203https://patchfirst.co/cve/CVE-2024-44309/CVE-2024-44309#kevThu, 21 Nov 2024 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2024-11-21. ENISA EUVD lists it as exploited. EPSS 21.9% (higher than 97.7% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 61.9 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2024-44258/CVE-2024-44258Mon, 28 Oct 2024 00:00:00 GMTApple · iOS and iPadOS. Not in CISA KEV. EPSS 0.8% (higher than 55% of CVEs). CVSS 7.1 HIGH. Public exploit code exists. Priority 57.3 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-23296/CVE-2024-23296#kevWed, 06 Mar 2024 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2024-03-06. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 72.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 63.0 of 100.kevpublic-exploitT1068T1211https://patchfirst.co/cve/CVE-2024-23225/CVE-2024-23225#kevWed, 06 Mar 2024 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2024-03-06. ENISA EUVD lists it as exploited. EPSS 1.5% (higher than 73.9% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 58.2 of 100.kevT1068T1211https://patchfirst.co/cve/CVE-2022-48618/CVE-2022-48618#kevWed, 31 Jan 2024 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2024-01-31. ENISA EUVD lists it as exploited. EPSS 0.5% (higher than 41.9% of CVEs). CVSS 7.0 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 51.3 of 100.kevT1068T1211https://patchfirst.co/cve/CVE-2024-23222/CVE-2024-23222#kevTue, 23 Jan 2024 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2024-01-23. ENISA EUVD lists it as exploited. EPSS 10.6% (higher than 95.8% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 68.3 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2023-41990/CVE-2023-41990#kevMon, 08 Jan 2024 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2024-01-08. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 72.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1059 Command and Scripting Interpreter. Priority 57.9 of 100.kevT1204.002T1059https://patchfirst.co/cve/CVE-2023-42917/CVE-2023-42917#kevMon, 04 Dec 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-12-04. ENISA EUVD lists it as exploited. EPSS 9.3% (higher than 95.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.2 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2023-42916/CVE-2023-42916#kevMon, 04 Dec 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-12-04. ENISA EUVD lists it as exploited. EPSS 17.8% (higher than 97.2% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1005 Data from Local System. Priority 62.0 of 100.kevT1189T1005https://patchfirst.co/cve/CVE-2023-42824/CVE-2023-42824#kevThu, 05 Oct 2023 00:00:00 GMTApple · iOS and iPadOS. In CISA KEV since 2023-10-05. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 61.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 60.8 of 100.kevpublic-exploitT1068T1548https://patchfirst.co/cve/CVE-2023-41993/CVE-2023-41993#kevMon, 25 Sep 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-09-25. ENISA EUVD lists it as exploited. EPSS 24.3% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 68.7 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2023-41992/CVE-2023-41992#kevMon, 25 Sep 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-09-25. ENISA EUVD lists it as exploited. EPSS 9.5% (higher than 95.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 67.5 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2023-41991/CVE-2023-41991#kevMon, 25 Sep 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-09-25. ENISA EUVD lists it as exploited. EPSS 13.4% (higher than 96.4% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1553.002 Code Signing. Priority 66.1 of 100.kevpublic-exploitT1204.002T1553.002https://patchfirst.co/cve/CVE-2023-41064/CVE-2023-41064#kevMon, 11 Sep 2023 00:00:00 GMTApple · iOS, iPadOS, and macOS. In CISA KEV since 2023-09-11. ENISA EUVD lists it as exploited. EPSS 53.4% (higher than 99% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1059 Command and Scripting Interpreter. Priority 68.3 of 100.kevpublic-exploitT1204.002T1059https://patchfirst.co/cve/CVE-2023-41061/CVE-2023-41061#kevMon, 11 Sep 2023 00:00:00 GMTApple · iOS, iPadOS, and watchOS. In CISA KEV since 2023-09-11. ENISA EUVD lists it as exploited. EPSS 4.4% (higher than 91.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 61.7 of 100.kevT1204.001T1059https://patchfirst.co/cve/CVE-2023-37450/CVE-2023-37450Thu, 27 Jul 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-07-13. ENISA EUVD lists it as exploited. EPSS 18.9% (higher than 97.3% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.6 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2023-38606/CVE-2023-38606Thu, 27 Jul 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-07-26. ENISA EUVD lists it as exploited. EPSS 2.9% (higher than 86.9% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 59.2 of 100.kevT1068T1211https://patchfirst.co/cve/CVE-2023-32434/CVE-2023-32434#kevFri, 23 Jun 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-06-23. ENISA EUVD lists it as exploited. EPSS 51.5% (higher than 98.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 68.2 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2023-32439/CVE-2023-32439#kevFri, 23 Jun 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-06-23. ENISA EUVD lists it as exploited. EPSS 24.0% (higher than 97.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.7 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2023-32435/CVE-2023-32435#kevFri, 23 Jun 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-06-23. ENISA EUVD lists it as exploited. EPSS 23.0% (higher than 97.7% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.7 of 100.kevT1189T1059https://patchfirst.co/cve/CVE-2023-32409/CVE-2023-32409Fri, 23 Jun 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-05-22. ENISA EUVD lists it as exploited. EPSS 16.5% (higher than 97% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1211 Exploitation for Stealth. Priority 63.4 of 100.kevT1211https://patchfirst.co/cve/CVE-2023-32373/CVE-2023-32373Fri, 23 Jun 2023 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2023-05-22. ENISA EUVD lists it as exploited. EPSS 12.2% (higher than 96.2% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 63.4 of 100.kevT1189T1059