{"schema_version":"1","data":[{"id":3510,"advisory_id":"0647845c-9ab7-42c0-9a15-4c0a33dcc673","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30761","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:18.76494+00:00","extraction_method":"structured","technologies":["core-kev","ios"],"cve_ids":["CVE-2021-30761"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS WebKit Memory Corruption Vulnerability","summary":"Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-30761","products":[{"name":{"value":"iOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-30761","aliases":["CVE-2021-30761"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-30761","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30761","dueDate":"2021-11-17","product":"iOS","dateAdded":"2021-11-03","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","vulnerabilityName":"Apple iOS WebKit Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-30761","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3506,"advisory_id":"8c82503e-24c2-4c80-a40c-061b78c48401","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30666","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:16.431318+00:00","extraction_method":"structured","technologies":["core-kev","ios"],"cve_ids":["CVE-2021-30666"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS WebKit Buffer Overflow Vulnerability","summary":"Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-30666","products":[{"name":{"value":"iOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-30666","aliases":["CVE-2021-30666"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2021-30666","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30666","dueDate":"2021-11-17","product":"iOS","dateAdded":"2021-11-03","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","vulnerabilityName":"Apple iOS WebKit Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-30666","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3500,"advisory_id":"627f3923-c4f0-4944-b625-5207fab7b7d1","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30762","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:12.59909+00:00","extraction_method":"structured","technologies":["core-kev","ios"],"cve_ids":["CVE-2021-30762"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS WebKit Use-After-Free Vulnerability","summary":"Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-30762","products":[{"name":{"value":"iOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-30762","aliases":["CVE-2021-30762"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2021-30762","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30762","dueDate":"2021-11-17","product":"iOS","dateAdded":"2021-11-03","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","vulnerabilityName":"Apple iOS WebKit Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-30762","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2580,"advisory_id":"f053bcc4-d336-4775-8df3-eb032088b4b5","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7287","source_published_at":"2022-05-23T00:00:00+00:00","published_at":"2026-10-24T21:21:19.646871+00:00","extraction_method":"structured","technologies":["core-kev","ios"],"cve_ids":["CVE-2019-7287"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS Memory Corruption Vulnerability","summary":"Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-7287","products":[{"name":{"value":"iOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-7287","aliases":["CVE-2019-7287"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2019-7287","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-7287","dueDate":"2022-06-13","product":"iOS","dateAdded":"2022-05-23","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.","vulnerabilityName":"Apple iOS Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-7287","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2569,"advisory_id":"a99e55ca-2dcd-442a-906e-a040f9ea6b9b","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4657","source_published_at":"2022-05-24T00:00:00+00:00","published_at":"2026-10-24T21:20:27.635226+00:00","extraction_method":"structured","technologies":["core-kev","ios"],"cve_ids":["CVE-2016-4657"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS Webkit Memory Corruption Vulnerability","summary":"Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-4657","products":[{"name":{"value":"iOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-4657","aliases":["CVE-2016-4657"],"affected":[],"modified":"2022-05-24T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2016-4657","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4657","dueDate":"2022-06-14","product":"iOS","dateAdded":"2022-05-24","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","vulnerabilityName":"Apple iOS Webkit Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-4657","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2568,"advisory_id":"79efbd59-799d-44b0-b728-b2c085dd774b","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4656","source_published_at":"2022-05-24T00:00:00+00:00","published_at":"2026-10-24T21:20:27.064725+00:00","extraction_method":"structured","technologies":["core-kev","ios"],"cve_ids":["CVE-2016-4656"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS Memory Corruption Vulnerability","summary":"A memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a denial-of-service (DoS) via a crafted application. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-4656","products":[{"name":{"value":"iOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-4656","aliases":["CVE-2016-4656"],"affected":[],"modified":"2022-05-24T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-4656","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4656","dueDate":"2022-06-14","product":"iOS","dateAdded":"2022-05-24","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a denial-of-service (DoS) via a crafted application.","vulnerabilityName":"Apple iOS Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-4656","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2567,"advisory_id":"e9173973-4233-4cb6-b267-651d3b4d8a37","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4655","source_published_at":"2022-05-24T00:00:00+00:00","published_at":"2026-10-24T21:20:26.481042+00:00","extraction_method":"structured","technologies":["core-kev","ios"],"cve_ids":["CVE-2016-4655"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS Information Disclosure Vulnerability","summary":"The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-4655","products":[{"name":{"value":"iOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-4655","aliases":["CVE-2016-4655"],"affected":[],"modified":"2022-05-24T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-200"],"cveID":"CVE-2016-4655","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4655","dueDate":"2022-06-14","product":"iOS","dateAdded":"2022-05-24","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application.","vulnerabilityName":"Apple iOS Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-4655","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1392,"advisory_id":"413cf762-9a12-4e73-99e0-b8ac94b928e3","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-42856","source_published_at":"2022-12-14T00:00:00+00:00","published_at":"2026-10-24T21:02:00.145335+00:00","extraction_method":"structured","technologies":["core-kev","ios"],"cve_ids":["CVE-2022-42856"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS Type Confusion Vulnerability","summary":"Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-42856","products":[{"name":{"value":"iOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-42856","aliases":["CVE-2022-42856"],"affected":[],"modified":"2022-12-14T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2022-42856","notes":"https://support.apple.com/en-us/HT213516;  https://nvd.nist.gov/vuln/detail/CVE-2022-42856","dueDate":"2023-01-04","product":"iOS","dateAdded":"2022-12-14","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution.","vulnerabilityName":"Apple iOS Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-42856","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1322,"advisory_id":"eb5d59c6-b359-44d0-8610-ab718e160239","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2004-1464","source_published_at":"2023-05-19T00:00:00+00:00","published_at":"2026-10-24T21:00:22.140415+00:00","extraction_method":"structured","technologies":["core-kev","ios"],"cve_ids":["CVE-2004-1464"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco IOS Denial-of-Service Vulnerability","summary":"Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and in some cases, Hypertext Transport Protocol (HTTP) access to the Cisco device. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2004-1464","products":[{"name":{"value":"IOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2004-1464","aliases":["CVE-2004-1464"],"affected":[],"modified":"2023-05-19T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2004-1464","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040827-telnet; https://nvd.nist.gov/vuln/detail/CVE-2004-1464","dueDate":"2023-06-09","product":"IOS","dateAdded":"2023-05-19","vendorProject":"Cisco","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and in some cases, Hypertext Transport Protocol (HTTP) access to the Cisco device.","vulnerabilityName":"Cisco IOS Denial-of-Service Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2004-1464","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":120,"advisory_id":"c96bb7dc-5dd3-4601-a572-b69489d61d0a","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-4128","source_published_at":"2026-07-13T00:00:00+00:00","published_at":"2026-10-24T20:40:40.659612+00:00","extraction_method":"structured","technologies":["core-kev","ios"],"cve_ids":["CVE-2008-4128"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco IOS Cross-Site Request Forgery Vulnerability","summary":"Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain \"show privilege\" command to the /level/15/exec/- URI, and (2) a certain \"alias exec\" command to the /level/15/exec/-/configure/http URI. CISA required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","evidence":"kev:CVE-2008-4128","products":[{"name":{"value":"IOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2008-4128","aliases":["CVE-2008-4128"],"affected":[],"modified":"2026-07-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-352"],"cveID":"CVE-2008-4128","notes":"https://www.cisco.com/c/en/us/obsolete/ios-nx-os-software/cisco-ios-software-releases-12-4-mainline.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2008-4128","dueDate":"2026-07-16","product":"IOS","dateAdded":"2026-07-13","vendorProject":"Cisco","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_exploited":true,"shortDescription":"Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain \"show privilege\" command to the /level/15/exec/- URI, and (2) a certain \"alias exec\" command to the /level/15/exec/-/configure/http URI.","vulnerabilityName":"Cisco IOS Cross-Site Request Forgery Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2008-4128","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3510,"next_before":120}