CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–5 of 5 records

CVE Vendor Product Added Due Status
CVE-2023-41974 — Apple iOS and iPadOS Use-After-Free Vulnerability
Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges.
 Apple iOS and iPadOS Mar 5, 2026 Mar 26, 2026
CVE-2025-24200 — Apple iOS and iPadOS Incorrect Authorization Vulnerability
Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device.
 Apple iOS and iPadOS Feb 12, 2025 Mar 5, 2025
CVE-2023-42824 — Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability
Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation.
 Apple iOS and iPadOS Oct 5, 2023 Oct 26, 2023
CVE-2022-42827 — Apple iOS and iPadOS Out-of-Bounds Write Vulnerability
Apple iOS and iPadOS kernel contain an out-of-bounds write vulnerability which can allow an application to perform code execution with kernel privileges.
 Apple iOS and iPadOS Oct 25, 2022 Nov 15, 2022
CVE-2021-30983 — Apple iOS and iPadOS Buffer Overflow Vulnerability
Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges.
 Apple iOS and iPadOS Jun 27, 2022 Jul 18, 2022