13 reportsPriority High
Apple vulnerabilities and exploitation
Multiple Apple products have been found to contain vulnerabilities that could allow attackers to execute arbitrary code. This poses a risk to UK organisations using affected systems.
First report Latest
What is going on
- Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that may lead to arbitrary code execution.
- CISA has reported that the vulnerability is being actively exploited in the wild.
- A separate buffer overflow vulnerability in Apple products was also reported, with evidence of active exploitation.
- Other Apple vulnerabilities have been identified, including a use-after-free WebKit vulnerability and a memory corruption issue in Qualcomm chipsets.
- CISA has added two new vulnerabilities to its known-exploited catalogue based on evidence of active exploitation.
- What to watch: Monitoring for further details on the extent of exploitation and any additional vulnerabilities affecting Apple products.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority HighType Vulnerability
Atlassian Multiple Products Exposed Files Vulnerability
- Priority LowType Research & news
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
- Priority MediumType Vulnerability
Mozilla Multiple Products Remote Code Execution Vulnerability
- Priority MediumType Vulnerability
Apple Multiple Products Unspecified Vulnerability
- Priority LowType Research & news
Apple turns iCloud into spy cloud, will start looking at public share links
- Priority MediumType Vulnerability
Apple Multiple Products Use-After-Free WebKit Vulnerability
- Priority HighType Vulnerability
Apple Multiple Buffer Overflow Vulnerability
- Priority HighType Vulnerability
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
- Priority HighType Vulnerability
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
- Priority HighType Vulnerability
Apple Multiple Products Buffer Overflow Vulnerability
- Priority LowType Research & news
APT36 Deploys Multiple Malware in RapidRust: A DNS Investigation
- Priority LowType Vulnerability
Xcode 27.3 beta (27C5020n)
- Priority LowType Vulnerability
iPadOS 27.3 beta (24C5037i)

