Skip to main content
13 reportsPriority High

Apple vulnerabilities and exploitation

Multiple Apple products have been found to contain vulnerabilities that could allow attackers to execute arbitrary code. This poses a risk to UK organisations using affected systems.

First report Latest

What is going on

  • Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that may lead to arbitrary code execution.
  • CISA has reported that the vulnerability is being actively exploited in the wild.
  • A separate buffer overflow vulnerability in Apple products was also reported, with evidence of active exploitation.
  • Other Apple vulnerabilities have been identified, including a use-after-free WebKit vulnerability and a memory corruption issue in Qualcomm chipsets.
  • CISA has added two new vulnerabilities to its known-exploited catalogue based on evidence of active exploitation.
  • What to watch: Monitoring for further details on the extent of exploitation and any additional vulnerabilities affecting Apple products.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed