What is the CISA KEV catalogue?

CISA's list of flaws attackers are known to be using. A flaw is added only with reliable evidence of attacks and a known fix.

Why does it matter more than the CVSS score?

Few CVEs are ever used in attacks. These are, so fix them first, whatever their score.

What is the due date?

The deadline for US federal agencies to fix it (BOD 26-04, which replaced BOD 22-01): as little as three days for recent entries. A sensible deadline for anyone.

Does it apply outside the US?

The deadlines don't, but the flaws are in software used everywhere. If you run it, it applies to you.

What does "used in ransomware" mean?

CISA knows ransomware groups have used the flaw.

How often is it updated?

CISA adds flaws several times a week. CVE Hawk checks hourly and alerts you within half an hour if it's your software.

CISA KEV catalogue: "Apple"

4 Nov 2026 Apple Multiple Products Authentication bypass CVE-2024-27834 5.5

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple safari 17.5, apple ipados 17.5, apple iphone os 17.5, apple tvos 17.5, apple ipados 16.7.8 and 5 older
CISA due date: 18 Nov 2026 (still open)
Weakness: CWE-287

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

29 Sep 2026 Apple Multiple Products Memory corruption CVE-2026-86950 8.8

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple ipados 26.7.1, apple iphone os 26.7.1, apple macos 26.7.1, apple ipados 18.7.11, apple iphone os 18.7.11 and 1 older
CISA due date: 13 Oct 2026
Weakness: CWE-787

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

On Hacker News

CVE-2026-86950: The Great Glyph Grift CVE-2026-86950: An in-the-wild iOS bug with a possible WhatsApp zero-click path

18 Aug 2026 Apple macOS Authentication bypass CVE-2026-65400 9.8

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple macos 26.6.1, apple macos 15.7.9, apple macos 14.8.9
CISA due date: 21 Aug 2026
Weakness: CWE-287

NVD Record · Vendor Advisory

On Hacker News

CVE-2026-65400: Apple macOS Screen Sharing authentication bypass

20 Mar 2026 Apple Multiple Products Memory corruption CVE-2025-43520 5.5

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may be able to cause unexpected system termination or write kernel memory.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple tvos 26.1, apple visionos 26.1, apple watchos 26.1, apple ipados 18.7.2, apple iphone os 18.7.2 and 2 older
CISA due date: 3 Apr 2026
Weakness: CWE-120

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

20 Mar 2026 Apple Multiple Products Security flaw CVE-2025-43510 7.8

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpected changes in memory shared between processes.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple tvos 26.1, apple visionos 26.1, apple watchos 26.1, apple ipados 18.7.2, apple iphone os 18.7.2 and 2 older
CISA due date: 3 Apr 2026
Weakness: CWE-667

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

20 Mar 2026 Apple Multiple Products Memory corruption CVE-2025-31277 8.8

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple safari 18.6, apple ipados 18.6, apple iphone os 18.6, apple tvos 18.6, apple macos 15.6 and 4 older
CISA due date: 3 Apr 2026
Weakness: CWE-119

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

5 Mar 2026 Apple Multiple Products Memory corruption CVE-2023-43000 8.8

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple safari 16.6, apple ipados 16.6, apple iphone os 16.6, apple ipados 15.8.7, apple iphone os 15.8.7 and 1 older
CISA due date: 26 Mar 2026
Weakness: CWE-416

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

5 Mar 2026 Apple iOS and iPadOS Memory corruption CVE-2023-41974 7.8

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple ipados 17.0, apple iphone os 17.0, apple ipados 15.8.7, apple iphone os 15.8.7
CISA due date: 26 Mar 2026
Weakness: CWE-416

NVD Record · Vendor Advisory · Advisory 2

5 Mar 2026 Apple Multiple Products Memory corruption CVE-2021-30952 7.8

An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple safari 15.2, apple ipados 15.2, apple iphone os 15.2, apple tvos 15.2, apple macos 12.1 and 3 older
CISA due date: 26 Mar 2026
Weakness: CWE-190

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

12 Feb 2026 Apple Multiple Products Memory corruption CVE-2026-20700 7.8

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 and CVE-2025-43529 were also issued in response to this report.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple ipados 26.3, apple iphone os 26.3, apple macos 26.3, apple tvos 26.3, apple visionos 26.3 and 1 older
CISA due date: 5 Mar 2026
Weakness: CWE-119

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

On Hacker News

Show HN: Live iOS 26.3 exploit detection (CVE-2026-20700) – Multi-region C2

15 Dec 2025 Apple Multiple Products Memory corruption CVE-2025-43529 8.8

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple safari 26.2, apple ipados 26.2, apple iphone os 26.2, apple macos 26.2, apple tvos 26.2 and 4 older
CISA due date: 5 Jan 2026
Weakness: CWE-416

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

12 Dec 2025 Google Chromium Memory corruption CVE-2025-14174 8.8

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): google chrome 143.0.7499.110, google chrome 143.0.7499.109, microsoft edge chromium 143.0.3650.80, apple safari 26.2, apple ipados 26.2 and 7 older
CISA due date: 2 Jan 2026
Weakness: CWE-787, CWE-119

NVD Record · Vendor Advisory · Advisory 2

20 Oct 2025 Apple Multiple Products Security flaw CVE-2022-48503 8.8

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple safari 15.6, apple ipados 15.6, apple iphone os 15.6, apple tvos 15.6, apple macos 12.5 and 1 older
CISA due date: 10 Nov 2025
Weakness: CWE-129

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

25 Aug 2025 Git Path traversal CVE-2025-48384 8.0

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple xcode 26.0, git-scm git 2.50.1, git-scm git 2.49.1, git-scm git 2.48.2, git-scm git 2.47.3 and 4 older
CISA due date: 15 Sep 2025
Weakness: CWE-59, CWE-436

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3 · More on Git

On Hacker News

Breaking Git with a carriage return and cloning RCE 162 comments

21 Aug 2025 Apple iOS, iPadOS, and macOS Memory corruption CVE-2025-43300 10.0

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple ipados 18.6.2, apple iphone os 18.6.2, apple ipados 17.7.10, apple ipados 16.7.12, apple iphone os 16.7.12 and 5 older
CISA due date: 11 Sep 2025
Weakness: CWE-787

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

On Hacker News

iOS 18.6.1 0-click RCE POC 56 comments CVE-2025-43300: "an sophisticated attack against specific individuals" 1 comment iOS 18.6.1 0-click RCE POC

22 Jul 2025 Google Chromium Input validation flaw CVE-2025-6558 8.8

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): google chrome 138.0.7204.157, apple safari 18.6, apple ipados 18.6, apple iphone os 18.6, apple macos 15.6 and 4 older
CISA due date: 12 Aug 2025
Weakness: CWE-20

NVD Record · Vendor Advisory · More on Ubuntu / Debian packages

16 Jun 2025 Apple Multiple Products Security flaw CVE-2025-43200 4.2

This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple ipados 18.3.1, apple ipados 17.7.5, apple ipados 16.7.11, apple ipados 15.8.4, apple iphone os 15.8.4 and 5 older
CISA due date: 7 Jul 2025

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

17 Apr 2025 Apple Multiple Products Access control flaw CVE-2025-31201 9.8

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple tvos 18.4.1, apple ipados 18.4.1, apple iphone os 18.4.1, apple macos 15.4.1, apple visionos 2.4.1
CISA due date: 8 May 2025
Weakness: CWE-1220

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

On Hacker News

Apple plugs zero-day holes used in targeted iPhone attacks

17 Apr 2025 Apple Multiple Products Memory corruption CVE-2025-31200 9.8

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS released before iOS 18.4.1.

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple tvos 18.4.1, apple ipados 18.4.1, apple iphone os 18.4.1, apple macos 15.4.1, apple watchos 11.5 and 1 older
CISA due date: 8 May 2025
Weakness: CWE-119

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

On Hacker News

CVE 2025 31200 31 comments Apple plugs zero-day holes used in targeted iPhone attacks

13 Mar 2025 Apple Multiple Products Memory corruption CVE-2025-24201 10.0

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).

What to do: Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
Fixed in (NVD): apple ipados 18.3.2, apple iphone os 18.3.2, apple safari 18.3.1, apple ipados 17.7.6, apple ipados 16.7.11 and 6 older
CISA due date: 3 Apr 2025
Weakness: CWE-787

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

12 Feb 2025 Apple iOS and iPadOS Access control flaw CVE-2025-24200 6.1

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): apple ipados 18.3.1, apple iphone os 18.3.1, apple ipados 16.7.11, apple iphone os 16.7.11, apple ipados 15.8.4 and 1 older
CISA due date: 5 Mar 2025
Weakness: CWE-863

NVD Record · Vendor Advisory

On Hacker News

First analysis of Apple's USB Restricted Mode bypass (CVE-2025-24200)Cellebrite vs. iOS iPhone

29 Jan 2025 Apple Multiple Products Memory corruption CVE-2025-24085 10.0

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): apple ipados 18.3, apple iphone os 18.3, apple tvos 18.3, apple ipados 17.7.6, apple macos 15.3 and 4 older
CISA due date: 19 Feb 2025
Weakness: CWE-416

NVD Record · Vendor Advisory · Advisory 2 · Advisory 3

21 Nov 2024 Apple Multiple Products Cross-site scripting CVE-2024-44309 6.3

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): apple safari 18.1.1, apple ipados 18.1.1, apple iphone os 18.1.1, apple ipados 17.7.2, apple iphone os 17.7.2 and 2 older
CISA due date: 12 Dec 2024
Weakness: CWE-79

NVD Record · Vendor Advisory · More on Ubuntu / Debian packages

21 Nov 2024 Apple Multiple Products Security flaw CVE-2024-44308 8.8

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): apple safari 18.1.1, apple ipados 18.1.1, apple iphone os 18.1.1, apple ipados 17.7.2, apple iphone os 17.7.2 and 2 older
CISA due date: 12 Dec 2024

NVD Record · Vendor Advisory · More on Ubuntu / Debian packages

6 Mar 2024 Apple Multiple Products Memory corruption CVE-2024-23296 7.8

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): apple ipados 17.4, apple iphone os 17.4, apple tvos 17.4, apple ipados 16.7.8, apple iphone os 16.7.8 and 5 older
CISA due date: 27 Mar 2024
Weakness: CWE-787

NVD Record · Vendor Advisory

On Hacker News

CVE-2024-23296

6 Mar 2024 Apple Multiple Products Memory corruption CVE-2024-23225 7.8

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): apple ipados 17.4, apple iphone os 17.4, apple tvos 17.4, apple ipados 16.7.6, apple iphone os 16.7.6 and 5 older
CISA due date: 27 Mar 2024
Weakness: CWE-787

NVD Record · Vendor Advisory

31 Jan 2024 Apple Multiple Products Race condition CVE-2022-48618 7.0

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1.

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): apple ipados 16.2, apple iphone os 16.2, apple tvos 16.2, apple macos 13.1, apple watchos 9.2
CISA due date: 21 Feb 2024
Weakness: CWE-367

The CISA KEV Catalogue, Searchable

About the KEV Catalogue