{"schema_version":"1","data":[{"id":3512,"advisory_id":"052f47d6-c495-4373-aff4-9732eaea854a","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30869","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:20.09391+00:00","extraction_method":"structured","technologies":["core-kev","ios-ipados-and-macos"],"cve_ids":["CVE-2021-30869"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS, iPadOS, and macOS Type Confusion Vulnerability","summary":"Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-30869","products":[{"name":{"value":"iOS, iPadOS, and macOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-30869","aliases":["CVE-2021-30869"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2021-30869","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30869","dueDate":"2021-11-17","product":"iOS, iPadOS, and macOS","dateAdded":"2021-11-03","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges.","vulnerabilityName":"Apple iOS, iPadOS, and macOS Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-30869","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3503,"advisory_id":"58d0d28a-4081-4295-8693-4d7805f96206","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1871","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:14.613273+00:00","extraction_method":"structured","technologies":["core-kev","ios-ipados-and-macos"],"cve_ids":["CVE-2021-1871"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","summary":"Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-1871","products":[{"name":{"value":"iOS, iPadOS, and macOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-1871","aliases":["CVE-2021-1871"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-1173"],"cveID":"CVE-2021-1871","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1871","dueDate":"2021-11-17","product":"iOS, iPadOS, and macOS","dateAdded":"2021-11-03","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","vulnerabilityName":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-1871","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3502,"advisory_id":"4dd7474d-e397-45d8-ad2f-02d3d0643b03","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1870","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:13.96682+00:00","extraction_method":"structured","technologies":["core-kev","ios-ipados-and-macos"],"cve_ids":["CVE-2021-1870"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","summary":"Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-1870","products":[{"name":{"value":"iOS, iPadOS, and macOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-1870","aliases":["CVE-2021-1870"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-1173"],"cveID":"CVE-2021-1870","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1870","dueDate":"2021-11-17","product":"iOS, iPadOS, and macOS","dateAdded":"2021-11-03","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","vulnerabilityName":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-1870","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2991,"advisory_id":"c07524db-7907-4943-b553-61a12f1fac4d","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30858","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:27:10.308701+00:00","extraction_method":"structured","technologies":["core-kev","ios-ipados-and-macos"],"cve_ids":["CVE-2021-30858"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS, iPadOS, macOS Use-After-Free Vulnerability","summary":"Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-30858","products":[{"name":{"value":"iOS, iPadOS, and macOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-30858","aliases":["CVE-2021-30858"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2021-30858","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30858","dueDate":"2021-11-17","product":"iOS, iPadOS, and macOS","dateAdded":"2021-11-03","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","vulnerabilityName":"Apple iOS, iPadOS, macOS Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-30858","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2887,"advisory_id":"74e8474e-252f-4dd2-b834-979e4848352e","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22620","source_published_at":"2022-02-11T00:00:00+00:00","published_at":"2026-10-24T21:26:07.901489+00:00","extraction_method":"structured","technologies":["core-kev","ios-ipados-and-macos"],"cve_ids":["CVE-2022-22620"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability","summary":"Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-22620","products":[{"name":{"value":"iOS, iPadOS, and macOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-22620","aliases":["CVE-2022-22620"],"affected":[],"modified":"2022-02-11T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2022-22620","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-22620","dueDate":"2022-02-25","product":"iOS, iPadOS, and macOS","dateAdded":"2022-02-11","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","vulnerabilityName":"Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-22620","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1439,"advisory_id":"435dc0cf-8711-4da4-bca1-5c9b3d39f51f","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9934","source_published_at":"2022-09-08T00:00:00+00:00","published_at":"2026-10-24T21:02:35.317818+00:00","extraction_method":"structured","technologies":["core-kev","ios-ipados-and-macos"],"cve_ids":["CVE-2020-9934"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS, iPadOS, and macOS Input Validation Vulnerability","summary":"Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-9934","products":[{"name":{"value":"iOS, iPadOS, and macOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-9934","aliases":["CVE-2020-9934"],"affected":[],"modified":"2022-09-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2020-9934","notes":"https://support.apple.com/en-us/HT211288, https://support.apple.com/en-us/HT211289; https://nvd.nist.gov/vuln/detail/CVE-2020-9934","dueDate":"2022-09-29","product":"iOS, iPadOS, and macOS","dateAdded":"2022-09-08","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information.","vulnerabilityName":"Apple iOS, iPadOS, and macOS Input Validation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-9934","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1435,"advisory_id":"3cf01ed0-0b66-488a-9d5e-1ea5629b6061","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-32917","source_published_at":"2022-09-14T00:00:00+00:00","published_at":"2026-10-24T21:02:31.93173+00:00","extraction_method":"structured","technologies":["core-kev","ios-ipados-and-macos"],"cve_ids":["CVE-2022-32917"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability","summary":"Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-32917","products":[{"name":{"value":"iOS, iPadOS, and macOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-32917","aliases":["CVE-2022-32917"],"affected":[],"modified":"2022-09-14T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20","CWE-787"],"cveID":"CVE-2022-32917","notes":"https://support.apple.com/en-us/HT213445, https://support.apple.com/en-us/HT213444;  https://nvd.nist.gov/vuln/detail/CVE-2022-32917","dueDate":"2022-10-05","product":"iOS, iPadOS, and macOS","dateAdded":"2022-09-14","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges.","vulnerabilityName":"Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-32917","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1357,"advisory_id":"fa20bad2-7320-4f50-8c08-6c1e7644708c","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30900","source_published_at":"2023-03-30T00:00:00+00:00","published_at":"2026-10-24T21:01:37.55937+00:00","extraction_method":"structured","technologies":["core-kev","ios-ipados-and-macos"],"cve_ids":["CVE-2021-30900"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","summary":"Apple GPU drivers, included in iOS, iPadOS, and macOS, contain an out-of-bounds write vulnerability that may allow a malicious application to execute code with kernel privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-30900","products":[{"name":{"value":"iOS, iPadOS, and macOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-30900","aliases":["CVE-2021-30900"],"affected":[],"modified":"2023-03-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20","CWE-787"],"cveID":"CVE-2021-30900","notes":"https://support.apple.com/en-us/HT21286, https://support.apple.com/en-us/HT212868, https://support.apple.com/kb/HT212872; https://nvd.nist.gov/vuln/detail/CVE-2021-30900","dueDate":"2023-04-20","product":"iOS, iPadOS, and macOS","dateAdded":"2023-03-30","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple GPU drivers, included in iOS, iPadOS, and macOS, contain an out-of-bounds write vulnerability that may allow a malicious application to execute code with kernel privileges.","vulnerabilityName":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-30900","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1346,"advisory_id":"cb539eb5-349a-41f6-84d9-0ae5b3297307","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-28206","source_published_at":"2023-04-10T00:00:00+00:00","published_at":"2026-10-24T21:01:29.212416+00:00","extraction_method":"structured","technologies":["core-kev","ios-ipados-and-macos"],"cve_ids":["CVE-2023-28206"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability","summary":"Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2023-28206","products":[{"name":{"value":"iOS, iPadOS, and macOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-28206","aliases":["CVE-2023-28206"],"affected":[],"modified":"2023-04-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2023-28206","notes":"https://support.apple.com/en-us/HT213720, https://support.apple.com/en-us/HT213721; https://nvd.nist.gov/vuln/detail/CVE-2023-28206","dueDate":"2023-05-01","product":"iOS, iPadOS, and macOS","dateAdded":"2023-04-10","vendorProject":"Apple","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges.","vulnerabilityName":"Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-28206","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1265,"advisory_id":"084c1f0b-9dae-4dfe-8f74-6fd4234c9e91","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41064","source_published_at":"2023-09-11T00:00:00+00:00","published_at":"2026-10-24T20:59:00.386959+00:00","extraction_method":"structured","technologies":["core-kev","ios-ipados-and-macos"],"cve_ids":["CVE-2023-41064"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability","summary":"Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2023-41064","products":[{"name":{"value":"iOS, iPadOS, and macOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-41064","aliases":["CVE-2023-41064"],"affected":[],"modified":"2023-09-11T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-120"],"cveID":"CVE-2023-41064","notes":"https://support.apple.com/en-us/HT213905, https://support.apple.com/en-us/HT213906; https://nvd.nist.gov/vuln/detail/CVE-2023-41064","dueDate":"2023-10-02","product":"iOS, iPadOS, and macOS","dateAdded":"2023-09-11","vendorProject":"Apple","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.","vulnerabilityName":"Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-41064","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":356,"advisory_id":"511981f7-627f-4391-92d3-bddd6f0a0bb4","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43300","source_published_at":"2025-08-21T00:00:00+00:00","published_at":"2026-10-24T20:44:36.550024+00:00","extraction_method":"structured","technologies":["core-kev","ios-ipados-and-macos"],"cve_ids":["CVE-2025-43300"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","summary":"Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2025-43300","products":[{"name":{"value":"iOS, iPadOS, and macOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-43300","aliases":["CVE-2025-43300"],"affected":[],"modified":"2025-08-21T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2025-43300","notes":"https://support.apple.com/en-us/124925 ; https://support.apple.com/en-us/124926 ; https://support.apple.com/en-us/124927 ; https://support.apple.com/en-us/124928 ; https://support.apple.com/en-us/124929 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43300","dueDate":"2025-09-11","product":"iOS, iPadOS, and macOS","dateAdded":"2025-08-21","vendorProject":"Apple","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.","vulnerabilityName":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2025-43300","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3512,"next_before":356}