Attack list
Mac
76 attacked bugs
Yes. Attackers are using Mac bugs right now.
What to do
Open the Apple menu, then System Settings, then General, then Software Update. Install everything offered and restart.
Attackers keep using these against anything that hasn't updated. Updating closes them.
BugConfirmed in attacks
- A bad image file can take over an iPhone, iPad or MacCVE-2026-86950Sep 29, 2026
- Apple macOS bug: improper authenticationCVE-2026-65400Aug 18, 2026
- Apple bug: improper lockingCVE-2025-43510Mar 20, 2026
- Apple bug: classic buffer overflowCVE-2025-43520Mar 20, 2026
- Apple bug: buffer overflowCVE-2025-31277Mar 20, 2026
- Apple bug: use-after-freeCVE-2023-43000Mar 5, 2026
- Apple bug: integer overflow or wraparoundCVE-2021-30952Mar 5, 2026
- Apple bug: buffer overflowCVE-2026-20700Feb 12, 2026
- Apple bug: use-after-free webkitCVE-2025-43529Dec 15, 2025
- Apple bug: unspecifiedCVE-2022-48503Oct 20, 2025
- Apple iOS, iPadOS, and macOS bug: ios, ipados, and macos out-of-bounds writeCVE-2025-43300Aug 21, 2025
- Apple bug: unspecifiedCVE-2025-43200Jun 16, 2025
- Apple bug: arbitrary read and writeCVE-2025-31201Apr 17, 2025
- Apple bug: memory corruptionCVE-2025-31200Apr 17, 2025
- Apple bug: webkit out-of-bounds writeCVE-2025-24201Mar 13, 2025
- Apple bug: use-after-freeCVE-2025-24085Jan 29, 2025
- Apple bug: cross-site scripting (XSS)CVE-2024-44309Nov 21, 2024
- Apple bug: code executionCVE-2024-44308Nov 21, 2024
- Apple bug: memory corruptionCVE-2024-23225Mar 6, 2024
- Apple bug: memory corruptionCVE-2024-23296Mar 6, 2024
- Apple bug: memory corruptionCVE-2022-48618Jan 31, 2024
- Apple bug: webkit type confusionCVE-2024-23222Jan 23, 2024
- Apple bug: code executionCVE-2023-41990Jan 8, 2024
- Apple bug: webkit memory corruptionCVE-2023-42917Dec 4, 2023
- Apple bug: webkit out-of-bounds readCVE-2023-42916Dec 4, 2023
- Apple bug: improper certificate validationCVE-2023-41991Sep 25, 2023
- Apple bug: kernel privilege escalationCVE-2023-41992Sep 25, 2023
- Apple bug: webkit code executionCVE-2023-41993Sep 25, 2023
- Apple iOS, iPadOS, and macOS bug: ios, ipados, and macos imageio buffer overflowCVE-2023-41064Sep 11, 2023
- Apple bug: kernel unspecifiedCVE-2023-38606Jul 26, 2023
- Apple bug: webkit code executionCVE-2023-37450Jul 13, 2023
- Apple bug: integer overflowCVE-2023-32434Jun 23, 2023
- Apple bug: webkit memory corruptionCVE-2023-32435Jun 23, 2023
- Apple bug: webkit type confusionCVE-2023-32439Jun 23, 2023
- Apple bug: webkit sandbox escapeCVE-2023-32409May 22, 2023
- Apple bug: webkit out-of-bounds readCVE-2023-28204May 22, 2023
- Apple bug: webkit use-after-freeCVE-2023-32373May 22, 2023
- Apple macOS bug: use-after-freeCVE-2019-8526Apr 17, 2023
- Apple bug: webkit use-after-freeCVE-2023-28205Apr 10, 2023
- Apple iOS, iPadOS, and macOS bug: ios, ipados, and macos iosurfaceaccelerator out-of-bounds writeCVE-2023-28206Apr 10, 2023
- Apple iOS, iPadOS, and macOS bug: ios, ipados, and macos out-of-bounds writeCVE-2021-30900Mar 30, 2023
- Apple bug: webkit type confusionCVE-2023-23529Feb 14, 2023
- Apple iOS, iPadOS, and macOS bug: ios, ipados, and macos remote code executionCVE-2022-32917Sep 14, 2022
- Apple iOS, iPadOS, and macOS bug: ios, ipados, and macos input validationCVE-2020-9934Sep 8, 2022
- Apple iOS, macOS, watchOS bug: ios, macos, watchos sandbox bypassCVE-2021-31010Aug 25, 2022
- Apple iOS and macOS bug: and macos out-of-bounds writeCVE-2022-32894Aug 18, 2022
- Apple iOS and macOS bug: and macos out-of-bounds writeCVE-2022-32893Aug 18, 2022
- Apple bug: memory corruptionCVE-2020-3837Jun 27, 2022
- Apple bug: memory corruptionCVE-2020-9907Jun 27, 2022
- Apple bug: use-after-freeCVE-2019-8605Jun 27, 2022
- Apple bug: memory corruptionCVE-2018-4344Jun 27, 2022
- Apple bug: memory corruptionCVE-2021-30883May 23, 2022
- Apple bug: memory corruptionCVE-2019-7286May 23, 2022
- Apple bug: type confusionCVE-2021-1789May 4, 2022
- Apple bug: type confusionCVE-2019-8506May 4, 2022
- Apple macOS bug: out-of-bounds writeCVE-2022-22675Apr 4, 2022
- Apple macOS bug: out-of-bounds readCVE-2022-22674Apr 4, 2022
- Apple iOS, iPadOS, and macOS bug: ios, ipados, and macos webkit use-after-freeCVE-2022-22620Feb 11, 2022
- Apple iOS and macOS bug: memory corruptionCVE-2022-22587Jan 28, 2022
- Apple iOS, iPadOS, and macOS bug: ios, ipados, macos use-after-freeCVE-2021-30858Nov 3, 2021
- Apple iOS and macOS bug: and macos group facetimeCVE-2019-6223Nov 3, 2021
- Apple bug: integer overflowCVE-2021-30860Nov 3, 2021
- Apple bug: memory corruptionCVE-2020-27930Nov 3, 2021
- Apple bug: memory corruptionCVE-2021-30807Nov 3, 2021
- Apple bug: memory initializationCVE-2020-27950Nov 3, 2021
- Apple bug: type confusionCVE-2020-27932Nov 3, 2021
- Apple bug: race conditionCVE-2021-1782Nov 3, 2021
- Apple iOS, iPadOS, and macOS bug: ios, ipados, and macos webkit remote code executionCVE-2021-1870Nov 3, 2021
- Apple iOS, iPadOS, and macOS bug: ios, ipados, and macos webkit remote code executionCVE-2021-1871Nov 3, 2021
- Apple bug: webkit storage use-after-freeCVE-2021-30661Nov 3, 2021
- Apple macOS bug: unspecifiedCVE-2021-30713Nov 3, 2021
- Apple macOS bug: unspecifiedCVE-2021-30657Nov 3, 2021
- Apple bug: webkit memory corruptionCVE-2021-30665Nov 3, 2021
- Apple bug: webkit integer overflowCVE-2021-30663Nov 3, 2021
- Apple iOS, iPadOS, and macOS bug: ios, ipados, and macos type confusionCVE-2021-30869Nov 3, 2021
- Apple bug: code executionCVE-2020-9859Nov 3, 2021
From the US government's list of bugs confirmed in real attacks (CISA KEV). Check everything you use.