Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Product

Multiple Products

Made by Apple. 54 of its vulnerabilities are known to have been exploited.

Coverage

CriticalAct nowExploitedCISA KEV

Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950) is being actively exploited, CISA warns

CISA added CVE-2026-86950 (Apple Multiple Products) to its Known Exploited Vulnerabilities catalog on September 29, 2026, which means there is reliable evidence of exploitation in the wild. Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.

Why it matters

CISA lists this as exploited in the wild. Unpatched macOS and iOS & iPadOS systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited Vulnerabilities · 5 sources
HomeSMBSecurity pros
CriticalAct nowExploitedCISA KEV

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing…

Why it matters

CISA lists this as exploited in the wild. Unpatched BIG-IP and Multiple Products systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Cybersecurity Advisories · 4 sources
EnterpriseSecurity pros

Recent intelligence

The latest developments from the last 30 days, newest first.

  1. Severity raisedUpdateKEV

    UPDATE: severity raised to critical: Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950) is being actively exploited, CISA warns

    Basis: CISA Known Exploited Vulnerabilities (government advisory)

  2. AdvisoryKEV

    Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950) is being actively exploited, CISA warns

    Basis: CISA Known Exploited Vulnerabilities (government advisory)

  3. Added to CISA KEVCVE-2026-86950

    CVE-2026-86950 added to CISA KEV: Apple Multiple Products, Apple Multiple Products Out-of-Bounds Write Vulnerability

    Basis: CISA Known Exploited Vulnerabilities catalog

Actively exploited

CVE-2026-86950CVSS 8.8

Apple Multiple Products

Apple Multiple Products Out-of-Bounds Write Vulnerability

Added Sep 29, 2026Fed. due Oct 2, 2026Coverage →
CVE-2025-31277CVSS 8.8

Apple Multiple Products

Apple Multiple Products Buffer Overflow Vulnerability

Added Mar 20, 2026Fed. due Apr 3, 2026
CVE-2025-43510CVSS 7.8

Apple Multiple Products

Apple Multiple Products Improper Locking Vulnerability

Added Mar 20, 2026Fed. due Apr 3, 2026
CVE-2025-43520CVSS 5.5

Apple Multiple Products

Apple Multiple Products Classic Buffer Overflow Vulnerability

Added Mar 20, 2026Fed. due Apr 3, 2026
CVE-2023-43000CVSS 8.8

Apple Multiple Products

Apple Multiple products Use-After-Free Vulnerability

Added Mar 5, 2026Fed. due Mar 26, 2026
CVE-2021-30952CVSS 7.8

Apple Multiple Products

Apple Multiple Products Integer Overflow or Wraparound Vulnerability

Added Mar 5, 2026Fed. due Mar 26, 2026
CVE-2026-20700CVSS 7.8

Apple Multiple Products

Apple Multiple Buffer Overflow Vulnerability

Added Feb 12, 2026Fed. due Mar 5, 2026
CVE-2025-43529CVSS 8.8

Apple Multiple Products

Apple Multiple Products Use-After-Free WebKit Vulnerability

Added Dec 15, 2025Fed. due Jan 5, 2026
CVE-2022-48503CVSS 8.8

Apple Multiple Products

Apple Multiple Products Unspecified Vulnerability

Added Oct 20, 2025Fed. due Nov 10, 2025
CVE-2025-43200CVSS 4.2

Apple Multiple Products

Apple Multiple Products Unspecified Vulnerability

Added Jun 16, 2025Fed. due Jul 7, 2025
CVE-2025-31200CVSS 9.8

Apple Multiple Products

Apple Multiple Products Memory Corruption Vulnerability

Added Apr 17, 2025Fed. due May 8, 2025
CVE-2025-31201CVSS 9.8

Apple Multiple Products

Apple Multiple Products Arbitrary Read and Write Vulnerability

Added Apr 17, 2025Fed. due May 8, 2025
CVE-2025-24201CVSS 10.0

Apple Multiple Products

Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Added Mar 13, 2025Fed. due Apr 3, 2025
CVE-2025-24085CVSS 10.0

Apple Multiple Products

Apple Multiple Products Use-After-Free Vulnerability

Added Jan 29, 2025Fed. due Feb 19, 2025
CVE-2024-44308CVSS 8.8

Apple Multiple Products

Apple Multiple Products Code Execution Vulnerability

Added Nov 21, 2024Fed. due Dec 12, 2024
CVE-2024-44309CVSS 6.3

Apple Multiple Products

Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

Added Nov 21, 2024Fed. due Dec 12, 2024
CVE-2024-23225CVSS 7.8

Apple Multiple Products

Apple Multiple Products Memory Corruption Vulnerability

Added Mar 6, 2024Fed. due Mar 27, 2024
CVE-2024-23296CVSS 7.8

Apple Multiple Products

Apple Multiple Products Memory Corruption Vulnerability

Added Mar 6, 2024Fed. due Mar 27, 2024
CVE-2022-48618CVSS 7.0

Apple Multiple Products

Apple Multiple Products Memory Corruption Vulnerability

Added Jan 31, 2024Fed. due Feb 21, 2024
CVE-2024-23222CVSS 8.8

Apple Multiple Products

Apple Multiple Products WebKit Type Confusion Vulnerability

Added Jan 23, 2024Fed. due Feb 13, 2024