{"schema_version":1,"title":"Apple Swift Crypto vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 3 vulnerabilities in Apple Swift Crypto: 0 in the last 7 days and 1 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-86983, was published on 28 October 2026. 1 vulnerability in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/swift-crypto","json_url":"https://junglewise.ai/threats/technologies/swift-crypto.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/swift-crypto","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":1,"all_time":3,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":1,"last_90_days":1,"last_365_days":3},"latest":[{"cve":"CVE-2026-86983","slug":"cve-2026-86983-a-remote-attacker-may-be-able-to-terminate-a-process-that-passes","title":"Swift Crypto P-384 VOPRF denial of service via unbounded input length","severity":"info","exploited":false,"published_at":"2026-10-28T23:17:11.26+00:00","url":"https://junglewise.ai/threats/cve-2026-86983-a-remote-attacker-may-be-able-to-terminate-a-process-that-passes"},{"cve":"CVE-2026-43823","cvss":9.8,"slug":"cve-2026-43823-apple-swift-crypto-double-free-in-rsa-public-key-initialization","title":"Apple swift-crypto double-free in RSA public key initialization","severity":"info","exploited":false,"published_at":"2026-07-23T15:17:05.613+00:00","url":"https://junglewise.ai/threats/cve-2026-43823-apple-swift-crypto-double-free-in-rsa-public-key-initialization"},{"cve":"CVE-2026-28815","cvss":7.5,"epss":0.0047,"slug":"cve-2026-28815-apple-swift-crypto-out-of-bounds-read-in-x-wing-hpke","title":"Apple swift-crypto out-of-bounds read in X-Wing HPKE decapsulation","severity":"high","exploited":false,"published_at":"2026-04-03T03:16:18.093+00:00","url":"https://junglewise.ai/threats/cve-2026-28815-apple-swift-crypto-out-of-bounds-read-in-x-wing-hpke"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Apple macOS","slug":"macos","vulnerabilities":1496,"url":"https://junglewise.ai/threats/technologies/macos"},{"name":"Apple iPadOS","slug":"ipados","vulnerabilities":739,"url":"https://junglewise.ai/threats/technologies/ipados"},{"name":"Apple visionOS","slug":"visionos","vulnerabilities":457,"url":"https://junglewise.ai/threats/technologies/visionos"},{"name":"Apple macOS Golden Gate","slug":"macos-golden-gate","vulnerabilities":449,"url":"https://junglewise.ai/threats/technologies/macos-golden-gate"},{"name":"Apple watchOS","slug":"watchos","vulnerabilities":386,"url":"https://junglewise.ai/threats/technologies/watchos"},{"name":"Apple tvOS","slug":"tvos","vulnerabilities":353,"url":"https://junglewise.ai/threats/technologies/tvos"},{"name":"Apple Ios","slug":"apple-ios","vulnerabilities":206,"url":"https://junglewise.ai/threats/technologies/apple-ios"},{"name":"Apple Iphone Os","slug":"iphone-os","vulnerabilities":203,"url":"https://junglewise.ai/threats/technologies/iphone-os"},{"name":"Apple Safari","slug":"safari","vulnerabilities":189,"url":"https://junglewise.ai/threats/technologies/safari"},{"name":"Apple Multiple Products","slug":"multiple-products","vulnerabilities":77,"url":"https://junglewise.ai/threats/technologies/multiple-products"},{"name":"Apple macOS Ventura","slug":"macos-ventura","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/macos-ventura"},{"name":"Apple macOS Monterey","slug":"macos-monterey","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/macos-monterey"}],"technology":{"hub":true,"name":"Apple Swift Crypto","slug":"swift-crypto","vendor":{"hub":true,"name":"Apple","slug":"apple","url":"https://junglewise.ai/threats/vendors/apple"},"aliases":[],"category":"library","homepage":"https://www.apple.com/swift/","repo_url":"https://github.com/apple/swift-crypto","description":"An open-source implementation of a substantial portion of the Apple CryptoKit framework for use on non-Apple platforms.","url":"https://junglewise.ai/threats/technologies/swift-crypto"},"most_severe":[{"cve":"CVE-2026-28815","cvss":7.5,"epss":0.0047,"slug":"cve-2026-28815-apple-swift-crypto-out-of-bounds-read-in-x-wing-hpke","title":"Apple swift-crypto out-of-bounds read in X-Wing HPKE decapsulation","severity":"high","exploited":false,"published_at":"2026-04-03T03:16:18.093+00:00","url":"https://junglewise.ai/threats/cve-2026-28815-apple-swift-crypto-out-of-bounds-read-in-x-wing-hpke"},{"cve":"CVE-2026-43823","cvss":9.8,"slug":"cve-2026-43823-apple-swift-crypto-double-free-in-rsa-public-key-initialization","title":"Apple swift-crypto double-free in RSA public key initialization","severity":"info","exploited":false,"published_at":"2026-07-23T15:17:05.613+00:00","url":"https://junglewise.ai/threats/cve-2026-43823-apple-swift-crypto-double-free-in-rsa-public-key-initialization"},{"cve":"CVE-2026-86983","slug":"cve-2026-86983-a-remote-attacker-may-be-able-to-terminate-a-process-that-passes","title":"Swift Crypto P-384 VOPRF denial of service via unbounded input length","severity":"info","exploited":false,"published_at":"2026-10-28T23:17:11.26+00:00","url":"https://junglewise.ai/threats/cve-2026-86983-a-remote-attacker-may-be-able-to-terminate-a-process-that-passes"}],"generated_at":"2026-11-11T03:07:00.183524+00:00"}