CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 51–60 of 95 records

CVE Vendor Product Added Due Status
CVE-2021-31010 — Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions.
 Apple iOS, macOS, watchOS Aug 25, 2022 Sep 15, 2022
CVE-2022-32893 — Apple iOS and macOS Out-of-Bounds Write Vulnerability
Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.
 Apple iOS and macOS Aug 18, 2022 Sep 8, 2022
CVE-2022-32894 — Apple iOS and macOS Out-of-Bounds Write Vulnerability
Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges.
 Apple iOS and macOS Aug 18, 2022 Sep 8, 2022
CVE-2018-4344 — Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.
 Apple Multiple Products Jun 27, 2022 Jul 18, 2022
CVE-2019-8605 — Apple Multiple Products Use-After-Free Vulnerability
A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges.
 Apple Multiple Products Jun 27, 2022 Jul 18, 2022
CVE-2020-3837 — Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.
 Apple Multiple Products Jun 27, 2022 Jul 18, 2022
CVE-2020-9907 — Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.
 Apple Multiple Products Jun 27, 2022 Jul 18, 2022
CVE-2021-30983 — Apple iOS and iPadOS Buffer Overflow Vulnerability
Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges.
 Apple iOS and iPadOS Jun 27, 2022 Jul 18, 2022
CVE-2016-4655 — Apple iOS Information Disclosure Vulnerability
The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application.
 Apple iOS May 24, 2022 Jun 14, 2022
CVE-2016-4656 — Apple iOS Memory Corruption Vulnerability
A memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a denial-of-service (DoS) via a crafted application.
 Apple iOS May 24, 2022 Jun 14, 2022