Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2016-4657 — Apple iOS Webkit Memory Corruption Vulnerability
Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
|
Apple | iOS | May 24, 2022 | Jun 14, 2022 | |
|
CVE-2019-7286 — Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.
|
Apple | Multiple Products | May 23, 2022 | Jun 13, 2022 | |
|
CVE-2019-7287 — Apple iOS Memory Corruption Vulnerability
Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.
|
Apple | iOS | May 23, 2022 | Jun 13, 2022 | |
|
CVE-2021-30883 — Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution.
|
Apple | Multiple Products | May 23, 2022 | Jun 13, 2022 | |
|
CVE-2019-8506 — Apple Multiple Products Type Confusion Vulnerability
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
|
Apple | Multiple Products | May 4, 2022 | May 25, 2022 | |
|
CVE-2021-1789 — Apple Multiple Products Type Confusion Vulnerability
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
|
Apple | Multiple Products | May 4, 2022 | May 25, 2022 | |
|
CVE-2022-22674 — Apple macOS Out-of-Bounds Read Vulnerability
macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.
|
Apple | macOS | Apr 4, 2022 | Apr 25, 2022 | |
|
CVE-2022-22675 — Apple macOS Out-of-Bounds Write Vulnerability
macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.
|
Apple | macOS | Apr 4, 2022 | Apr 25, 2022 | |
|
CVE-2022-22620 — Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
|
Apple | iOS, iPadOS, and macOS | Feb 11, 2022 | Feb 25, 2022 | |
|
CVE-2014-4404 — Apple OS X Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context.
|
Apple | OS X | Feb 10, 2022 | Aug 10, 2022 |
Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
iOS · May 24, 2022
Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.
Multiple Products · May 23, 2022
Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.
iOS · May 23, 2022
Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution.
Multiple Products · May 23, 2022
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
Multiple Products · May 4, 2022
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
Multiple Products · May 4, 2022
macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.
macOS · Apr 4, 2022
macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.
macOS · Apr 4, 2022
Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
iOS, iPadOS, and macOS · Feb 11, 2022
Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context.
OS X · Feb 10, 2022