Technology · Apple
Apple Safari vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 189 vulnerabilities in Apple Safari: 0 in the last 7 days and 64 in the last 90 days, 28 of them critical and 28 exploited in the wild. The most recent, CVE-2024-27834, was published on 4 November 2026. 36 vulnerabilities in the last four weeks, up 414% on the four before (7). 1 critical against 0, 1 exploited in the wild against 0.
- Last 7 days
- 0
- Last 90 days
- 64
- Critical, all time
- 28
- Exploited in the wild
- 28
About Apple Safari
Apple's web browser for macOS, iOS, and iPadOS platforms.
Latest Apple Safari vulnerabilities
- CVE-2024-27834: Apple iOS, iPadOS, macOS, Safari, tvOS, watchOS pointer authentication bypasscriticalexploited in the wildEPSS 0.6%
- CVE-2026-86986: Safari use-after-free in memory managementinfo
- CVE-2026-86985: Apple Safari input validation vulnerabilityinfo
- CVE-2026-86974: Apple Safari and OS type confusion in WebContent processinginfo
- CVE-2026-86973: Apple Safari out-of-bounds read in web content processinginfo
- CVE-2026-113952: Apple Safari/iOS/iPadOS logic issue in Lockdown Mode media restrictionsinfo
- CVE-2026-113949: Apple Safari type confusion in state managementinfo
- CVE-2026-113904: Apple Safari use-after-free in web content handlinginfo
- CVE-2026-113903: Apple Safari use-after-free in memory managementinfo
- CVE-2026-113901: Apple Safari use-after-free in memory managementinfo
- CVE-2026-113897: Apple Safari WebContent sandbox escapeinfo
- CVE-2026-112699: Apple Safari out-of-bounds read in web content processinginfo
- CVE-2026-112697: Apple Safari use-after-free in memory managementinfo
- CVE-2026-112695: Apple Safari use-after-free in web content processinginfo
- CVE-2026-112693: Apple Safari use-after-free in WebContent renderinginfo
- CVE-2026-112686: Apple Safari race condition in web content processinginfo
- CVE-2026-112684: Apple Safari denial of service via malicious web contentinfo
- CVE-2026-112680: Apple Safari out-of-bounds read in web content processinginfo
- CVE-2026-112673: Apple Safari type confusion in state handlinginfo
- CVE-2026-112669: Apple Safari race condition in state handlinginfo
- CVE-2026-112666: Apple Safari use-after-free in WebKitinfo
- CVE-2026-112659: Apple Safari type confusion in memory handlinghighCVSS 8.8
- CVE-2026-112655: Apple Safari use-after-free in memory managementhighCVSS 8.8
- CVE-2026-112654: Apple Safari use-after-free in memory managementinfo
- CVE-2026-112653: Apple Safari use-after-free in memory managementinfo
Most severe Apple Safari vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2025-24201: Apple Multiple Products WebKit Out-of-Bounds Write Vulnerabilitycriticalexploited in the wildCVSS 10
- CVE-2025-43529: Apple WebKit use-after-free in multiple productscriticalexploited in the wildCVSS 8.8EPSS 8.8%
- CVE-2023-43000: Apple Multiple Products use-after-free in Web Content processingcriticalexploited in the wildCVSS 8.8EPSS 3.9%
- CVE-2025-31277: Apple Multiple Products memory corruption in web content processingcriticalexploited in the wildCVSS 8.8EPSS 1.5%
- CVE-2021-30952: Apple Multiple Products integer overflow in WebKit content processingcriticalexploited in the wildCVSS 8.8EPSS 0.9%
- CVE-2022-48503: Apple Multiple Products code execution in JavaScriptCorecriticalexploited in the wildCVSS 8.8EPSS 0.2%
- CVE-2024-44308: Apple Multiple Products Code Execution Vulnerabilitycriticalexploited in the wildCVSS 8.8
- CVE-2024-23222: Apple Multiple Products WebKit Type Confusion Vulnerabilitycriticalexploited in the wildCVSS 8.8
- CVE-2023-42917: Apple Multiple Products WebKit Memory Corruption Vulnerabilitycriticalexploited in the wildCVSS 8.8
- CVE-2023-41993: Apple Multiple Products WebKit Code Execution Vulnerabilitycriticalexploited in the wildCVSS 8.8
Vulnerabilities per week
36 vulnerabilities in the last four weeks, up 414% on the four before (7). 1 critical against 0, 1 exploited in the wild against 0. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 20 | 0 | |
| 24 Aug 2026 | 1 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 7 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 2 | 0 | |
| 26 Oct 2026 | 33 | 0 | |
| 2 Nov 2026 | 1 | 1 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Apple Safari vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/safari)<a href="https://junglewise.ai/threats/technologies/safari"><img src="https://junglewise.ai/threats/technologies/safari/badge.svg" alt="Apple Safari vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/safari.json, and this page as text at https://junglewise.ai/threats/technologies/safari.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Apple Safari vulnerabilities", https://junglewise.ai/threats/technologies/safari, 11 November 2026.