CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 71–80 of 95 records

CVE Vendor Product Added Due Status
CVE-2015-1130 — Apple OS X Authentication Bypass Vulnerability
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.
 Apple OS X Feb 10, 2022 Aug 10, 2022
CVE-2022-22587 — Apple Memory Corruption Vulnerability
Apple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code with kernel privileges.
 Apple iOS and macOS Jan 28, 2022 Feb 11, 2022
CVE-2019-6223 — Apple iOS and macOS Group Facetime Vulnerability
Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to answer unknowingly or without user interaction.
 Apple iOS and macOS Nov 3, 2021 May 3, 2022
CVE-2020-27930 — Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processing maliciously crafted front.
 Apple Multiple Products Nov 3, 2021 May 3, 2022
CVE-2020-27932 — Apple Multiple Products Type Confusion Vulnerability
Apple iOS, iPadOS, macOS, and watchOS contain a type confusion vulnerability that may allow a malicious application to execute code with kernel privileges.
 Apple Multiple Products Nov 3, 2021 May 3, 2022
CVE-2020-27950 — Apple Multiple Products Memory Initialization Vulnerability
Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory.
 Apple Multiple Products Nov 3, 2021 May 3, 2022
CVE-2020-9818 — Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termination when processing a maliciously crafted mail message.
 Apple iOS, iPadOS, and watchOS Nov 3, 2021 May 3, 2022
CVE-2020-9819 — Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability
Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously crafted mail message.
 Apple iOS, iPadOS, and watchOS Nov 3, 2021 May 3, 2022
CVE-2020-9859 — Apple Multiple Products Code Execution Vulnerability
Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.
 Apple Multiple Products Nov 3, 2021 May 3, 2022
CVE-2021-1782 — Apple Multiple Products Race Condition Vulnerability
Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.
 Apple Multiple Products Nov 3, 2021 Nov 17, 2021