{"schema_version":1,"title":"Apple vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 1,078 vulnerabilities in Apple: 10 in the last 7 days and 559 in the last 90 days, 158 of them critical and 118 exploited in the wild. The most recent, CVE-2026-83964, was published on 22 September 2026. 14 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/apple","json_url":"https://junglewise.ai/threats/vendors/apple.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/apple","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":305,"all_time":1078,"critical":158,"exploited":118,"last_7_days":10,"last_30_days":325,"last_90_days":559,"last_365_days":964},"latest":[{"cve":"CVE-2026-83964","cvss":6.2,"epss":0.0011,"slug":"cve-2026-83964-adobe-connect-is-affected-by-an-improper-certificate-validation","title":"Adobe Connect improper certificate validation","severity":"medium","exploited":false,"published_at":"2026-09-22T19:16:54.13+00:00","url":"https://junglewise.ai/threats/cve-2026-83964-adobe-connect-is-affected-by-an-improper-certificate-validation"},{"cve":"CVE-2026-75698","cvss":9.3,"epss":0.0032,"slug":"cve-2026-75698-adobe-connect-is-affected-by-a-reflected-cross-site-scripting-xss","title":"Adobe Connect reflected Cross-Site Scripting in web page","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.91+00:00","url":"https://junglewise.ai/threats/cve-2026-75698-adobe-connect-is-affected-by-a-reflected-cross-site-scripting-xss"},{"cve":"CVE-2026-75697","cvss":9.3,"epss":0.003,"slug":"cve-2026-75697-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored cross-site scripting in form fields","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.77+00:00","url":"https://junglewise.ai/threats/cve-2026-75697-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-75689","cvss":9.3,"epss":0.003,"slug":"cve-2026-75689-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored cross-site scripting","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.643+00:00","url":"https://junglewise.ai/threats/cve-2026-75689-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-75686","cvss":9.3,"epss":0.0105,"slug":"cve-2026-75686-adobe-connect-is-affected-by-an-improper-input-validation","title":"Adobe Connect improper input validation vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.52+00:00","url":"https://junglewise.ai/threats/cve-2026-75686-adobe-connect-is-affected-by-an-improper-input-validation"},{"cve":"CVE-2026-75684","cvss":9.3,"epss":0.003,"slug":"cve-2026-75684-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored Cross-Site Scripting vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.393+00:00","url":"https://junglewise.ai/threats/cve-2026-75684-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-75682","cvss":9.9,"epss":0.0054,"slug":"cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of","title":"Adobe Connect SQL injection leading to arbitrary code execution","severity":"critical","exploited":false,"published_at":"2026-09-22T19:16:46.26+00:00","url":"https://junglewise.ai/threats/cve-2026-75682-adobe-connect-is-affected-by-an-improper-neutralization-of"},{"cve":"CVE-2026-48361","cvss":6.1,"epss":0.0018,"slug":"cve-2026-48361-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss","title":"Adobe Connect stored cross-site scripting","severity":"medium","exploited":false,"published_at":"2026-09-22T19:16:43.763+00:00","url":"https://junglewise.ai/threats/cve-2026-48361-adobe-connect-is-affected-by-a-stored-cross-site-scripting-xss"},{"cve":"CVE-2026-34689","cvss":8.6,"epss":0.0066,"slug":"cve-2026-34689-adobe-connect-is-affected-by-an-improper-limitation-of-a-pathname","title":"Adobe Connect path traversal in file access","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:43.21+00:00","url":"https://junglewise.ai/threats/cve-2026-34689-adobe-connect-is-affected-by-an-improper-limitation-of-a-pathname"},{"cve":"CVE-2026-95511","slug":"cve-2026-95511-rejected-reason-not-a-vulnerability-creating-a-serial-queue-that","title":"CUPS configuration file overwrite in serial queue creation","severity":"info","exploited":false,"published_at":"2026-09-22T09:17:06.217+00:00","url":"https://junglewise.ai/threats/cve-2026-95511-rejected-reason-not-a-vulnerability-creating-a-serial-queue-that"},{"cve":"CVE-2026-82985","cvss":6.5,"epss":0.0038,"slug":"cve-2026-82985-apple-photos-smart-album-configuration-disclosure","title":"Apple Photos smart album configuration disclosure","severity":"medium","exploited":false,"published_at":"2026-09-18T02:17:08.153+00:00","url":"https://junglewise.ai/threats/cve-2026-82985-apple-photos-smart-album-configuration-disclosure"},{"cve":"CVE-2026-65388","cvss":7.5,"epss":0.0043,"slug":"cve-2026-65388-apple-containerization-registry-credential-disclosure-in","title":"Apple Containerization registry credential disclosure in RegistryClient","severity":"high","exploited":false,"published_at":"2026-09-16T23:16:54.147+00:00","url":"https://junglewise.ai/threats/cve-2026-65388-apple-containerization-registry-credential-disclosure-in"},{"cve":"CVE-2026-91748","cvss":8.3,"epss":0.0023,"slug":"cve-2026-91748-google-chrome-race-condition-in-extensions-on-mac","title":"Google Chrome race condition in Extensions on Mac","severity":"high","exploited":false,"published_at":"2026-09-15T21:16:48.703+00:00","url":"https://junglewise.ai/threats/cve-2026-91748-google-chrome-race-condition-in-extensions-on-mac"},{"cve":"CVE-2026-91744","cvss":5.3,"epss":0.0023,"slug":"cve-2026-91744-google-chrome-race-condition-in-platformintegration-on-macos","title":"Google Chrome race condition in PlatformIntegration on macOS","severity":"medium","exploited":false,"published_at":"2026-09-15T21:16:48.143+00:00","url":"https://junglewise.ai/threats/cve-2026-91744-google-chrome-race-condition-in-platformintegration-on-macos"},{"cve":"CVE-2026-91742","cvss":4.8,"epss":0.002,"slug":"cve-2026-91742-google-chrome-ios-pricetracking-confused-deputy-bypass","title":"Google Chrome iOS PriceTracking confused deputy bypass","severity":"medium","exploited":false,"published_at":"2026-09-15T21:16:47.89+00:00","url":"https://junglewise.ai/threats/cve-2026-91742-google-chrome-ios-pricetracking-confused-deputy-bypass"},{"cve":"CVE-2026-91727","cvss":8.1,"epss":0.0011,"slug":"cve-2026-91727-google-chrome-incorrect-reference-resolution-in-extensions-on-mac","title":"Google Chrome incorrect reference resolution in Extensions on Mac","severity":"high","exploited":false,"published_at":"2026-09-15T21:16:45.98+00:00","url":"https://junglewise.ai/threats/cve-2026-91727-google-chrome-incorrect-reference-resolution-in-extensions-on-mac"},{"cve":"CVE-2026-91712","cvss":8.3,"epss":0.0027,"slug":"cve-2026-91712-google-chrome-race-condition-in-extensions-on-mac","title":"Google Chrome race condition in Extensions on Mac","severity":"high","exploited":false,"published_at":"2026-09-15T21:16:44.043+00:00","url":"https://junglewise.ai/threats/cve-2026-91712-google-chrome-race-condition-in-extensions-on-mac"},{"cve":"CVE-2026-86924","cvss":5.5,"epss":0.0016,"slug":"cve-2026-86924-apple-ios-and-ipados-memory-corruption-via-malicious-accessory","title":"Apple iOS and iPadOS memory corruption via malicious accessory","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.863+00:00","url":"https://junglewise.ai/threats/cve-2026-86924-apple-ios-and-ipados-memory-corruption-via-malicious-accessory"},{"cve":"CVE-2026-86917","cvss":7.8,"epss":0.0015,"slug":"cve-2026-86917-apple-macos-privilege-escalation-via-permissions-issue","title":"Apple macOS privilege escalation via permissions issue","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:41.76+00:00","url":"https://junglewise.ai/threats/cve-2026-86917-apple-macos-privilege-escalation-via-permissions-issue"},{"cve":"CVE-2026-86911","cvss":5.5,"epss":0.0015,"slug":"cve-2026-86911-apple-macos-clickjacking-protection-bypass-in-secure-prompts","title":"Apple macOS clickjacking protection bypass in secure prompts","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.657+00:00","url":"https://junglewise.ai/threats/cve-2026-86911-apple-macos-clickjacking-protection-bypass-in-secure-prompts"},{"cve":"CVE-2026-86910","cvss":5.5,"epss":0.0018,"slug":"cve-2026-86910-apple-macos-apfs-permissions-issue-via-path-validation-bypass","title":"Apple macOS APFS permissions issue via path validation bypass","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.55+00:00","url":"https://junglewise.ai/threats/cve-2026-86910-apple-macos-apfs-permissions-issue-via-path-validation-bypass"},{"cve":"CVE-2026-86909","cvss":4.4,"epss":0.0015,"slug":"cve-2026-86909-apple-macos-gatekeeper-bypass-via-logic-issue","title":"Apple macOS Gatekeeper bypass via logic issue","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.457+00:00","url":"https://junglewise.ai/threats/cve-2026-86909-apple-macos-gatekeeper-bypass-via-logic-issue"},{"cve":"CVE-2026-86905","cvss":5.5,"epss":0.0014,"slug":"cve-2026-86905-apple-keychain-unauthorized-credential-deletion-vulnerability","title":"Apple Keychain unauthorized credential deletion vulnerability","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.353+00:00","url":"https://junglewise.ai/threats/cve-2026-86905-apple-keychain-unauthorized-credential-deletion-vulnerability"},{"cve":"CVE-2026-86904","cvss":7.5,"epss":0.0043,"slug":"cve-2026-86904-apple-ios-ipados-watchos-cross-app-tracking-privacy-issue","title":"Apple iOS iPadOS watchOS cross-app tracking privacy issue","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:41.247+00:00","url":"https://junglewise.ai/threats/cve-2026-86904-apple-ios-ipados-watchos-cross-app-tracking-privacy-issue"},{"cve":"CVE-2026-86903","cvss":5.5,"epss":0.0016,"slug":"cve-2026-86903-apple-ios-out-of-bounds-read-in-kernel-memory","title":"Apple iOS out-of-bounds read in kernel memory","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.14+00:00","url":"https://junglewise.ai/threats/cve-2026-86903-apple-ios-out-of-bounds-read-in-kernel-memory"}],"vendor":{"hub":true,"name":"Apple","slug":"apple","description":"American technology company that designs and manufactures consumer electronics, computing devices, and software.","url":"https://junglewise.ai/threats/vendors/apple"},"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":164},{"week":"2026-08-03","critical":1,"exploited":1,"vulnerabilities":1},{"week":"2026-08-10","critical":1,"exploited":0,"vulnerabilities":3},{"week":"2026-08-17","critical":1,"exploited":0,"vulnerabilities":37},{"week":"2026-08-24","critical":8,"exploited":0,"vulnerabilities":25},{"week":"2026-08-31","critical":1,"exploited":0,"vulnerabilities":18},{"week":"2026-09-07","critical":5,"exploited":0,"vulnerabilities":45},{"week":"2026-09-14","critical":8,"exploited":0,"vulnerabilities":252},{"week":"2026-09-21","critical":6,"exploited":0,"vulnerabilities":10},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2025-20393","cvss":10,"epss":0.0499,"slug":"cve-2025-20393-cisco-secure-email-gateway-command-injection-in-spam-quarantine","title":"Cisco Secure Email Gateway command injection in Spam Quarantine","severity":"critical","exploited":true,"published_at":"2025-12-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-20393-cisco-secure-email-gateway-command-injection-in-spam-quarantine"},{"cve":"CVE-2025-43300","cvss":10,"epss":0.0446,"slug":"cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o","title":"Apple iOS, iPadOS, and macOS out-of-bounds write in Image I/O","severity":"critical","exploited":true,"published_at":"2025-08-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o"},{"cve":"CVE-2025-24201","cvss":10,"slug":"cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability","title":"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24201-apple-multiple-products-webkit-out-of-bounds-write-vulnerability"},{"cve":"CVE-2025-24085","cvss":10,"slug":"cve-2025-24085-apple-multiple-products-use-after-free-vulnerability","title":"Apple Multiple Products Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24085-apple-multiple-products-use-after-free-vulnerability"},{"cve":"CVE-2022-22536","cvss":10,"slug":"cve-2022-22536-sap-multiple-products-http-request-smuggling-vulnerability","title":"SAP Multiple Products HTTP Request Smuggling Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22536-sap-multiple-products-http-request-smuggling-vulnerability"},{"cve":"CVE-2017-7921","cvss":9.8,"epss":0.9423,"slug":"cve-2017-7921-hikvision-ip-cameras-improper-authentication","title":"Hikvision IP Cameras improper authentication","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-7921-hikvision-ip-cameras-improper-authentication"},{"cve":"CVE-2010-3765","cvss":9.8,"epss":0.8662,"slug":"cve-2010-3765-mozilla-multiple-products-memory-corruption-in","title":"Mozilla Multiple Products memory corruption in nsCSSFrameConstructor","severity":"critical","exploited":true,"published_at":"2025-10-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-3765-mozilla-multiple-products-memory-corruption-in"},{"cve":"CVE-2021-22681","cvss":9.8,"epss":0.1816,"slug":"cve-2021-22681-rockwell-automation-logix-designer-authentication-bypass-in-logix","title":"Rockwell Automation Logix Designer authentication bypass in Logix Controllers","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22681-rockwell-automation-logix-designer-authentication-bypass-in-logix"},{"cve":"CVE-2025-59718","cvss":9.8,"epss":0.0949,"slug":"cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml","title":"Fortinet Multiple Products auth bypass via improper SAML signature verification","severity":"critical","exploited":true,"published_at":"2025-12-09T18:15:54.983+00:00","url":"https://junglewise.ai/threats/cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml"},{"cve":"CVE-2025-10585","cvss":9.8,"epss":0.0542,"slug":"cve-2025-10585-google-chrome-type-confusion-in-v8-engine","title":"Google Chrome type confusion in V8 engine","severity":"critical","exploited":true,"published_at":"2025-09-24T17:15:39.473+00:00","url":"https://junglewise.ai/threats/cve-2025-10585-google-chrome-type-confusion-in-v8-engine"}],"generated_at":"2026-09-28T03:07:00.154823+00:00","technologies":[{"name":"Apple macOS","slug":"macos-tahoe","vulnerabilities":907,"url":"https://junglewise.ai/threats/technologies/macos-tahoe"},{"name":"Apple iPadOS","slug":"ipados","vulnerabilities":501,"url":"https://junglewise.ai/threats/technologies/ipados"},{"name":"Apple visionOS","slug":"visionos","vulnerabilities":291,"url":"https://junglewise.ai/threats/technologies/visionos"},{"name":"Apple watchOS","slug":"watchos","vulnerabilities":288,"url":"https://junglewise.ai/threats/technologies/watchos"},{"name":"Apple tvOS","slug":"tvos","vulnerabilities":260,"url":"https://junglewise.ai/threats/technologies/tvos"},{"name":"Apple macOS Golden Gate","slug":"macos-golden-gate","vulnerabilities":172,"url":"https://junglewise.ai/threats/technologies/macos-golden-gate"},{"name":"Apple Iphone Os","slug":"iphone-os","vulnerabilities":165,"url":"https://junglewise.ai/threats/technologies/iphone-os"},{"name":"Apple Safari","slug":"safari","vulnerabilities":141,"url":"https://junglewise.ai/threats/technologies/safari"},{"name":"Apple Multiple Products","slug":"multiple-products","vulnerabilities":75,"url":"https://junglewise.ai/threats/technologies/multiple-products"},{"name":"Apple macOS Ventura","slug":"macos-ventura","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/macos-ventura"},{"name":"Apple macOS Monterey","slug":"macos-monterey","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/macos-monterey"},{"name":"Apple SwiftNIO","slug":"swiftnio","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/swiftnio"},{"name":"Apple Container","slug":"container","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/container"},{"name":"Apple SwiftNIO HTTP2","slug":"swiftnio-http2","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/swiftnio-http2"}]}