Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
95 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2026-86950 | Apple | Apple Multiple Products Out-of-Bounds Write Vulnerability | Severity: High CVSS 8.8 | Sep 29, 2026 | Not known |
| CVE-2026-65400 | Apple | Apple macOS Improper Authentication Vulnerability | Severity: Critical CVSS 9.8 | Aug 18, 2026 | Not known |
| CVE-2025-31277 | Apple | Apple Multiple Products Buffer Overflow Vulnerability | Severity: High CVSS 8.8 | Mar 20, 2026 | Not known |
| CVE-2025-43510 | Apple | Apple Multiple Products Improper Locking Vulnerability | Severity: High CVSS 7.8 | Mar 20, 2026 | Not known |
| CVE-2025-43520 | Apple | Apple Multiple Products Classic Buffer Overflow Vulnerability | Severity: Elevated CVSS 5.5 | Mar 20, 2026 | Not known |
| CVE-2023-43000 | Apple | Apple Multiple products Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Mar 5, 2026 | Not known |
| CVE-2021-30952 | Apple | Apple Multiple Products Integer Overflow or Wraparound Vulnerability | Severity: High CVSS 7.8 | Mar 5, 2026 | Not known |
| CVE-2023-41974 | Apple | Apple iOS and iPadOS Use-After-Free Vulnerability | Severity: High CVSS 7.8 | Mar 5, 2026 | Not known |
| CVE-2026-20700 | Apple | Apple Multiple Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Feb 12, 2026 | Not known |
| CVE-2025-43529 | Apple | Apple Multiple Products Use-After-Free WebKit Vulnerability | Severity: High CVSS 8.8 | Dec 15, 2025 | Not known |
| CVE-2022-48503 | Apple | Apple Multiple Products Unspecified Vulnerability | Severity: High CVSS 8.8 | Oct 20, 2025 | Not known |
| CVE-2025-43300 | Apple | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | Severity: Critical CVSS 10.0 | Aug 21, 2025 | Not known |
| CVE-2025-43200 | Apple | Apple Multiple Products Unspecified Vulnerability | Severity: Elevated CVSS 4.2 | Jun 16, 2025 | Not known |
| CVE-2025-31200 | Apple | Apple Multiple Products Memory Corruption Vulnerability | Severity: Critical CVSS 9.8 | Apr 17, 2025 | Not known |
| CVE-2025-31201 | Apple | Apple Multiple Products Arbitrary Read and Write Vulnerability | Severity: Critical CVSS 9.8 | Apr 17, 2025 | Not known |
| CVE-2025-24201 | Apple | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability | Severity: Critical CVSS 10.0 | Mar 13, 2025 | Not known |
| CVE-2025-24200 | Apple | Apple iOS and iPadOS Incorrect Authorization Vulnerability | Severity: Elevated CVSS 6.1 | Feb 12, 2025 | Not known |
| CVE-2025-24085 | Apple | Apple Multiple Products Use-After-Free Vulnerability | Severity: Critical CVSS 10.0 | Jan 29, 2025 | Not known |
| CVE-2024-44308 | Apple | Apple Multiple Products Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 21, 2024 | Not known |
| CVE-2024-44309 | Apple | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability | Severity: Elevated CVSS 6.3 | Nov 21, 2024 | Not known |
| CVE-2024-23225 | Apple | Apple Multiple Products Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Mar 6, 2024 | Not known |
| CVE-2024-23296 | Apple | Apple Multiple Products Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Mar 6, 2024 | Not known |
| CVE-2022-48618 | Apple | Apple Multiple Products Memory Corruption Vulnerability | Severity: High CVSS 7.0 | Jan 31, 2024 | Not known |
| CVE-2024-23222 | Apple | Apple Multiple Products WebKit Type Confusion Vulnerability | Severity: High CVSS 8.8 | Jan 23, 2024 | Not known |
| CVE-2023-41990 | Apple | Apple Multiple Products Code Execution Vulnerability | Severity: High CVSS 7.8 | Jan 8, 2024 | Not known |
| CVE-2023-42917 | Apple | Apple Multiple Products WebKit Memory Corruption Vulnerability | Severity: High CVSS 8.8 | Dec 4, 2023 | Not known |
| CVE-2023-42916 | Apple | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | Severity: Elevated CVSS 6.5 | Dec 4, 2023 | Not known |
| CVE-2023-42824 | Apple | Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Oct 5, 2023 | Not known |
| CVE-2023-41993 | Apple | Apple Multiple Products WebKit Code Execution Vulnerability | Severity: High CVSS 8.8 | Sep 25, 2023 | Not known |
| CVE-2023-41992 | Apple | Apple Multiple Products Kernel Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Sep 25, 2023 | Not known |
| CVE-2023-41991 | Apple | Apple Multiple Products Improper Certificate Validation Vulnerability | Severity: Elevated CVSS 5.5 | Sep 25, 2023 | Not known |
| CVE-2023-41061 | Apple | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | Severity: High CVSS 7.8 | Sep 11, 2023 | Not known |
| CVE-2023-41064 | Apple | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Sep 11, 2023 | Not known |
| CVE-2023-38606 | Apple | Apple Multiple Products Kernel Unspecified Vulnerability | Severity: Elevated CVSS 5.5 | Jul 26, 2023 | Not known |
| CVE-2023-37450 | Apple | Apple Multiple Products WebKit Code Execution Vulnerability | Severity: High CVSS 8.8 | Jul 13, 2023 | Not known |
| CVE-2023-32435 | Apple | Apple Multiple Products WebKit Memory Corruption Vulnerability | Severity: High CVSS 8.8 | Jun 23, 2023 | Not known |
| CVE-2023-32439 | Apple | Apple Multiple Products WebKit Type Confusion Vulnerability | Severity: High CVSS 8.8 | Jun 23, 2023 | Not known |
| CVE-2023-32434 | Apple | Apple Multiple Products Integer Overflow Vulnerability | Severity: High CVSS 7.8 | Jun 23, 2023 | Not known |
| CVE-2023-32373 | Apple | Apple Multiple Products WebKit Use-After-Free Vulnerability | Severity: High CVSS 8.8 | May 22, 2023 | Not known |
| CVE-2023-32409 | Apple | Apple Multiple Products WebKit Sandbox Escape Vulnerability | Severity: High CVSS 8.6 | May 22, 2023 | Not known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.