{"schema_version":1,"title":"Apple Multiple Products vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 75 vulnerabilities in Apple Multiple Products: 0 in the last 7 days and 0 in the last 90 days, 75 of them critical and 75 exploited in the wild. The most recent, CVE-2025-43510, was published on 20 March 2026.","url":"https://junglewise.ai/threats/technologies/multiple-products","json_url":"https://junglewise.ai/threats/technologies/multiple-products.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/multiple-products","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":75,"critical":75,"exploited":75,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":13},"latest":[{"cve":"CVE-2025-43510","cvss":7.8,"epss":0.003,"slug":"cve-2025-43510-apple-multiple-products-improper-locking-in-shared-memory","title":"Apple Multiple Products improper locking in shared memory","severity":"critical","exploited":true,"published_at":"2026-03-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43510-apple-multiple-products-improper-locking-in-shared-memory"},{"cve":"CVE-2025-43520","cvss":5.5,"epss":0.0027,"slug":"cve-2025-43520-apple-multiple-products-classic-buffer-overflow-in-kernel-memory","title":"Apple Multiple Products classic buffer overflow in kernel memory","severity":"critical","exploited":true,"published_at":"2026-03-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43520-apple-multiple-products-classic-buffer-overflow-in-kernel-memory"},{"cve":"CVE-2021-22681","cvss":9.8,"epss":0.1816,"slug":"cve-2021-22681-rockwell-automation-logix-designer-authentication-bypass-in-logix","title":"Rockwell Automation Logix Designer authentication bypass in Logix Controllers","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22681-rockwell-automation-logix-designer-authentication-bypass-in-logix"},{"cve":"CVE-2021-30952","cvss":8.8,"epss":0.0089,"slug":"cve-2021-30952-apple-multiple-products-integer-overflow-in-webkit-content","title":"Apple Multiple Products integer overflow in WebKit content processing","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30952-apple-multiple-products-integer-overflow-in-webkit-content"},{"cve":"CVE-2017-7921","cvss":9.8,"epss":0.9423,"slug":"cve-2017-7921-hikvision-ip-cameras-improper-authentication","title":"Hikvision IP Cameras improper authentication","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-7921-hikvision-ip-cameras-improper-authentication"},{"cve":"CVE-2026-20700","cvss":7.8,"epss":0.0041,"slug":"cve-2026-20700-apple-multiple-operating-systems-buffer-overflow","title":"Apple Multiple Operating Systems Buffer Overflow","severity":"critical","exploited":true,"published_at":"2026-02-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20700-apple-multiple-operating-systems-buffer-overflow"},{"cve":"CVE-2026-24858","cvss":9.8,"epss":0.048,"slug":"cve-2026-24858-fortinet-multiple-products-authentication-bypass-in-forticloud","title":"Fortinet Multiple Products authentication bypass in FortiCloud SSO","severity":"critical","exploited":true,"published_at":"2026-01-27T20:16:24.477+00:00","url":"https://junglewise.ai/threats/cve-2026-24858-fortinet-multiple-products-authentication-bypass-in-forticloud"},{"cve":"CVE-2025-20393","cvss":10,"epss":0.0499,"slug":"cve-2025-20393-cisco-secure-email-gateway-command-injection-in-spam-quarantine","title":"Cisco Secure Email Gateway command injection in Spam Quarantine","severity":"critical","exploited":true,"published_at":"2025-12-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-20393-cisco-secure-email-gateway-command-injection-in-spam-quarantine"},{"cve":"CVE-2025-43529","cvss":8.8,"epss":0.0017,"slug":"cve-2025-43529-apple-webkit-use-after-free-in-multiple-products","title":"Apple WebKit use-after-free in multiple products","severity":"critical","exploited":true,"published_at":"2025-12-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43529-apple-webkit-use-after-free-in-multiple-products"},{"cve":"CVE-2025-59718","cvss":9.8,"epss":0.0949,"slug":"cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml","title":"Fortinet Multiple Products auth bypass via improper SAML signature verification","severity":"critical","exploited":true,"published_at":"2025-12-09T18:15:54.983+00:00","url":"https://junglewise.ai/threats/cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml"},{"cve":"CVE-2023-43000","cvss":8.8,"epss":0.039,"slug":"cve-2023-43000-apple-multiple-products-use-after-free-in-web-content-processing","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, S","severity":"critical","exploited":true,"published_at":"2025-11-05T19:15:47.937+00:00","url":"https://junglewise.ai/threats/cve-2023-43000-apple-multiple-products-use-after-free-in-web-content-processing"},{"cve":"CVE-2022-48503","cvss":8.8,"epss":0.0016,"slug":"cve-2022-48503-apple-multiple-products-code-execution-in-javascriptcore","title":"Apple Multiple Products code execution in JavaScriptCore","severity":"critical","exploited":true,"published_at":"2025-10-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-48503-apple-multiple-products-code-execution-in-javascriptcore"},{"cve":"CVE-2010-3765","cvss":9.8,"epss":0.8662,"slug":"cve-2010-3765-mozilla-multiple-products-memory-corruption-in","title":"Mozilla Multiple Products memory corruption in nsCSSFrameConstructor","severity":"critical","exploited":true,"published_at":"2025-10-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-3765-mozilla-multiple-products-memory-corruption-in"},{"cve":"CVE-2025-53690","cvss":9,"epss":0.0684,"slug":"cve-2025-53690-sitecore-multiple-products-deserialization-of-untrusted-data","title":"Sitecore Multiple Products deserialization of untrusted data","severity":"critical","exploited":true,"published_at":"2025-09-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-53690-sitecore-multiple-products-deserialization-of-untrusted-data"},{"cve":"CVE-2025-31277","cvss":8.8,"epss":0.0148,"slug":"cve-2025-31277-apple-multiple-products-memory-corruption-in-web-content","title":"Apple Multiple Products memory corruption in web content processing","severity":"critical","exploited":true,"published_at":"2025-07-30T00:15:30.83+00:00","url":"https://junglewise.ai/threats/cve-2025-31277-apple-multiple-products-memory-corruption-in-web-content"},{"cve":"CVE-2025-43200","cvss":4.2,"epss":0.0091,"slug":"cve-2025-43200-apple-multiple-products-logic-issue-in-icloud-link-media","title":"Apple Multiple Products logic issue in iCloud Link media processing","severity":"critical","exploited":true,"published_at":"2025-06-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43200-apple-multiple-products-logic-issue-in-icloud-link-media"},{"cve":"CVE-2025-32756","cvss":9.8,"slug":"cve-2025-32756-fortinet-multiple-products-stack-based-buffer-overflow","title":"Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-32756-fortinet-multiple-products-stack-based-buffer-overflow"},{"cve":"CVE-2025-31200","cvss":9.8,"slug":"cve-2025-31200-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31200-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2025-31201","cvss":9.8,"slug":"cve-2025-31201-apple-multiple-products-arbitrary-read-and-write-vulnerability","title":"Apple Multiple Products Arbitrary Read and Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31201-apple-multiple-products-arbitrary-read-and-write-vulnerability"},{"cve":"CVE-2025-24201","cvss":10,"slug":"cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability","title":"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability"},{"cve":"CVE-2025-24085","cvss":10,"slug":"cve-2025-24085-apple-multiple-products-use-after-free-vulnerability","title":"Apple Multiple Products Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24085-apple-multiple-products-use-after-free-vulnerability"},{"cve":"CVE-2024-55956","cvss":9.8,"slug":"cve-2024-55956-cleo-multiple-products-unauthenticated-file-upload-vulnerability","title":"Cleo Multiple Products Unauthenticated File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-55956-cleo-multiple-products-unauthenticated-file-upload-vulnerability"},{"cve":"CVE-2024-50623","cvss":9.8,"slug":"cve-2024-50623-cleo-multiple-products-unrestricted-file-upload-vulnerability","title":"Cleo Multiple Products Unrestricted File Upload Vulnerability","severity":"critical","exploited":true,"published_at":"2024-12-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-50623-cleo-multiple-products-unrestricted-file-upload-vulnerability"},{"cve":"CVE-2024-44309","cvss":6.3,"slug":"cve-2024-44309-apple-multiple-products-cross-site-scripting-xss-vulnerability","title":"Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-44309-apple-multiple-products-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2024-44308","cvss":8.8,"slug":"cve-2024-44308-apple-multiple-products-code-execution-vulnerability","title":"Apple Multiple Products Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2024-11-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-44308-apple-multiple-products-code-execution-vulnerability"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Apple macOS","slug":"macos-tahoe","vulnerabilities":906,"url":"https://junglewise.ai/threats/technologies/macos-tahoe"},{"name":"Apple iPadOS","slug":"ipados","vulnerabilities":501,"url":"https://junglewise.ai/threats/technologies/ipados"},{"name":"Apple visionOS","slug":"visionos","vulnerabilities":291,"url":"https://junglewise.ai/threats/technologies/visionos"},{"name":"Apple watchOS","slug":"watchos","vulnerabilities":288,"url":"https://junglewise.ai/threats/technologies/watchos"},{"name":"Apple tvOS","slug":"tvos","vulnerabilities":260,"url":"https://junglewise.ai/threats/technologies/tvos"},{"name":"Apple macOS Golden Gate","slug":"macos-golden-gate","vulnerabilities":172,"url":"https://junglewise.ai/threats/technologies/macos-golden-gate"},{"name":"Apple Iphone Os","slug":"iphone-os","vulnerabilities":165,"url":"https://junglewise.ai/threats/technologies/iphone-os"},{"name":"Apple Safari","slug":"safari","vulnerabilities":141,"url":"https://junglewise.ai/threats/technologies/safari"},{"name":"Apple macOS Ventura","slug":"macos-ventura","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/macos-ventura"},{"name":"Apple macOS Monterey","slug":"macos-monterey","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/macos-monterey"},{"name":"Apple SwiftNIO","slug":"swiftnio","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/swiftnio"},{"name":"Apple Container","slug":"container","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/container"}],"technology":{"hub":true,"name":"Apple Multiple Products","slug":"multiple-products","vendor":{"name":"Apple","slug":"apple","url":"https://junglewise.ai/threats/vendors/apple"},"aliases":[],"homepage":"https://www.apple.com","description":"A collection of various hardware and software offerings developed by Apple.","url":"https://junglewise.ai/threats/technologies/multiple-products"},"most_severe":[{"cve":"CVE-2025-20393","cvss":10,"epss":0.0499,"slug":"cve-2025-20393-cisco-secure-email-gateway-command-injection-in-spam-quarantine","title":"Cisco Secure Email Gateway command injection in Spam Quarantine","severity":"critical","exploited":true,"published_at":"2025-12-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-20393-cisco-secure-email-gateway-command-injection-in-spam-quarantine"},{"cve":"CVE-2025-24201","cvss":10,"slug":"cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability","title":"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability"},{"cve":"CVE-2025-24085","cvss":10,"slug":"cve-2025-24085-apple-multiple-products-use-after-free-vulnerability","title":"Apple Multiple Products Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24085-apple-multiple-products-use-after-free-vulnerability"},{"cve":"CVE-2022-22536","cvss":10,"slug":"cve-2022-22536-sap-multiple-products-http-request-smuggling-vulnerability","title":"SAP Multiple Products HTTP Request Smuggling Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22536-sap-multiple-products-http-request-smuggling-vulnerability"},{"cve":"CVE-2017-7921","cvss":9.8,"epss":0.9423,"slug":"cve-2017-7921-hikvision-ip-cameras-improper-authentication","title":"Hikvision IP Cameras improper authentication","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-7921-hikvision-ip-cameras-improper-authentication"},{"cve":"CVE-2010-3765","cvss":9.8,"epss":0.8662,"slug":"cve-2010-3765-mozilla-multiple-products-memory-corruption-in","title":"Mozilla Multiple Products memory corruption in nsCSSFrameConstructor","severity":"critical","exploited":true,"published_at":"2025-10-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-3765-mozilla-multiple-products-memory-corruption-in"},{"cve":"CVE-2021-22681","cvss":9.8,"epss":0.1816,"slug":"cve-2021-22681-rockwell-automation-logix-designer-authentication-bypass-in-logix","title":"Rockwell Automation Logix Designer authentication bypass in Logix Controllers","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22681-rockwell-automation-logix-designer-authentication-bypass-in-logix"},{"cve":"CVE-2025-59718","cvss":9.8,"epss":0.0949,"slug":"cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml","title":"Fortinet Multiple Products auth bypass via improper SAML signature verification","severity":"critical","exploited":true,"published_at":"2025-12-09T18:15:54.983+00:00","url":"https://junglewise.ai/threats/cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml"},{"cve":"CVE-2026-24858","cvss":9.8,"epss":0.048,"slug":"cve-2026-24858-fortinet-multiple-products-authentication-bypass-in-forticloud","title":"Fortinet Multiple Products authentication bypass in FortiCloud SSO","severity":"critical","exploited":true,"published_at":"2026-01-27T20:16:24.477+00:00","url":"https://junglewise.ai/threats/cve-2026-24858-fortinet-multiple-products-authentication-bypass-in-forticloud"},{"cve":"CVE-2025-32756","cvss":9.8,"slug":"cve-2025-32756-fortinet-multiple-products-stack-based-buffer-overflow","title":"Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-32756-fortinet-multiple-products-stack-based-buffer-overflow"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}