CyberSecBulletin

Apple vulnerabilities

We track 1,317 vulnerabilities in Apple products across 48 products. 1,301 are rated high or critical, and 104 have been exploited in real attacks. The most recent was published on November 9, 2026.

1,317vulnerabilities
218critical
1,083high
104exploited
8.1average CVSS score

Latest Apple vulnerabilities

  • 9.1 Critical severity

    macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2022-32847AppleEPSS 3.21%

    This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. A remote user may be able to cause unexpected system terminati

  • 10.0 Critical severity

    macOS: Protection Mechanism Failure

    CVE-2022-32845AppleEPSS 5.41%

    This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to break out of its sandbox.

  • 7.1 High severity

    macOS: Out-of-bounds Write

    CVE-2022-32843Apple

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted Postscript file may result in unexpected app termina

  • 7.8 High severity

    macOS: Out-of-bounds Read

    CVE-2022-32842Apple

    An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Monterey 12.5. An app may be able to gain elevated privileges.

  • 7.1 High severity

    macOS: Out-of-bounds Read

    CVE-2022-32831Apple

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or

  • 7.8 High severity

    macOS: Improper Privilege Management

    CVE-2022-32829Apple

    This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

  • 7.8 High severity

    macOS: Improper Privilege Management

    CVE-2022-32826Apple

    An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileg

  • 7.8 High severity

    macOS: Out-of-bounds Write

    CVE-2022-32821Apple

    A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

  • 7.8 High severity

    macOS: Out-of-bounds Write

    CVE-2022-32820Apple

    An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to execute arbi

  • 7.8 High severity

    macOS: Improper Privilege Management

    CVE-2022-32819Apple

    A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges.

  • 7.8 High severity

    macOS: Out-of-bounds Write

    CVE-2022-32815Apple

    The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app with root privileges may be able to execute arb

  • 7.8 High severity

    macOS: Out-of-bounds Write

    CVE-2022-32798AppleEPSS 1.65%

    An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. An app may be able to gain elevated privileges.

  • 7.1 High severity

    This issue was addressed with improved checks.

    CVE-2022-32797AppleEPSS 1.06%

    This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of proces

  • 7.8 High severity

    macOS: Out-of-bounds Write

    CVE-2022-32796AppleEPSS 1.11%

    A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

  • 8.8 High severity

    macOS: Out-of-bounds Write

    CVE-2022-32792AppleEPSS 2.3%

    An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code executio

  • 7.5 High severity

    macOS: Uncontrolled Resource Consumption

    CVE-2022-32790AppleEPSS 2.07%

    This issue was addressed with improved checks. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, macOS Big Sur 11.6.6, Security Update 2022-004 Catalina. A remote user may be able to cause a denial-of-service.

  • 8.8 High severity

    macOS: Out-of-bounds Write

    CVE-2022-32787AppleEPSS 1.63%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. Processing maliciously crafted web

  • 8.8 High severity

    macOS: Out-of-bounds Write

    CVE-2022-26700AppleEPSS 1.47%

    A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to code execution.

  • 8.8 High severity

    Safari: Origin Validation Error

    CVE-2022-22637Apple

    A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.

  • 8.8 High severity

    Safari: Use After Free

    CVE-2022-22628AppleEPSS 1.37%

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

  • 8.8 High severity

    Safari: Use After Free

    CVE-2022-22624AppleEPSS 1.37%

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

  • 8.8 High severity

    Safari: Out-of-bounds Write

    CVE-2022-22610AppleEPSS 1.28%

    A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to code execution.

  • 7.5 High severity

    SwiftNIO Extras: Loop with Unreachable Exit Condition

    CVE-2022-3252Swift Project

    Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These two objects (HTTPRequestDecompressor and HTTPResponseDecompressor) both failed to

  • 7.8 High severity

    Apple iOS, iPadOS, and macOS Remote Code Execution Exploited

    CVE-2022-32917AppleEPSS 5.56%

    The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that

  • 8.8 High severity

    iOS: Out-of-bounds Read

    CVE-2022-32912AppleEPSS 1.57%

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.

  • 7.8 High severity

    iOS: Out-of-bounds Write

    CVE-2022-32911Apple

    The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app may be able to execute arbitrary code with kernel privileges.

  • 7.8 High severity

    iOS: Out-of-bounds Write

    CVE-2022-32908Apple

    A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. A user may be able to elevate privileges.

  • 8.8 High severity

    iOS: Out-of-bounds Write

    CVE-2022-32886AppleEPSS 1.99%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.

  • 9.8 Critical severity

    macOS: Out-of-bounds Write

    CVE-2022-32863AppleEPSS 1.16%

    A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 15.6, macOS Monterey 12.5. Processing maliciously crafted web content may lead to arbitrary code execution.

  • 7.8 High severity

    macOS: Protection Mechanism Failure

    CVE-2022-32802Apple

    A logic issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, tvOS 15.6, macOS Monterey 12.5. Processing a maliciously crafted file may lead to arbitrary code execution.

  • 9.8 Critical severity

    macOS: Buffer Copy without Checking Size of Input

    CVE-2022-32788AppleEPSS 2.83%

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution.

  • 8.8 High severity

    macOS: Protection Mechanism Failure

    CVE-2022-26696Apple

    This issue was addressed with improved environment sanitization. This issue is fixed in macOS Monterey 12.4. A sandboxed process may be able to circumvent sandbox restrictions.

  • 7.8 High severity

    Apple iOS and macOS Out-of-Bounds Write Exploited

    CVE-2022-32894AppleEPSS 3.29%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that t

  • 8.8 High severity

    Apple iOS and macOS Out-of-Bounds Write Exploited

    CVE-2022-32893AppleEPSS 10.5%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware

  • 7.8 High severity

    macOS: Improper Privilege Management

    CVE-2022-32840Apple

    This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app may be able to execute arbitrary code with kernel privileges.

  • 9.8 Critical severity

    macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2022-32839AppleEPSS 4.13%

    The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A remote user may cause an unexpected app termination or

  • 7.8 High severity

    macOS: Out-of-bounds Write

    CVE-2022-32837Apple

    This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to cause unexpected system termination or write kernel memory.

  • 7.8 High severity

    macOS: Out-of-bounds Write

    CVE-2022-32813Apple

    The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. An app with root privileges may be able to execute arb

  • 7.8 High severity

    macOS: Out-of-bounds Write

    CVE-2022-32812Apple

    The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.

  • 7.8 High severity

    macOS: Improper Locking

    CVE-2022-32811Apple

    A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.