Apple Inc. Safari

Name: Apple Inc. Safari
Brand: Apple Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical205high110medium4low

updated 2026-10-27

vulnerabilities (385)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-28205US	high8.8OT critical	27.1% (98th)	KEV	no fix	2023-04-10	≤ 16.4.1
CVE-2025-43529US	—OT critical	25.7% (98th)	KEV	no fix	2025-12-17	≤ 26.2
CVE-2023-41993US	high8.8OT critical	24.3% (98th)	KEV	no fix	2023-09-21	≤ 16.6.1
CVE-2022-22620US	high8.8OT critical	16.3% (97th)	KEV	no fix	2022-03-18	≤ 15.3
CVE-2019-8506US	high8.8OT critical	16.2% (97th)	KEV	no fix	2019-12-18	≤ 12.1
CVE-2024-23222US	high8.8OT critical	10.6% (96th)	KEV	no fix	2024-01-23	≤ 17.3
CVE-2024-44308US	high8.8OT critical	10.2% (96th)	KEV	no fix	2024-11-20	≤ 18.1.1
CVE-2025-24201US	critical10.0OT critical	3.85% (90th)	KEV	no fix	2025-03-11	≤ 18.3.1
CVE-2023-32439US	high8.8OT critical	24.0% (98th)	KEV	no fix	2023-06-23	≤ 16.5.1
CVE-2023-32435US	high8.8OT critical	23.0% (98th)	KEV	no fix	2023-06-23	≤ 16.4
CVE-2024-44309US	medium6.3OT critical	22.6% (98th)	KEV	no fix	2024-11-20	≤ 18.1.1
CVE-2023-37450US	high8.8OT critical	18.9% (97th)	KEV	no fix	2023-07-27	≤ 16.6
CVE-2023-42916US	medium6.5OT critical	17.8% (97th)	KEV	no fix	2023-11-30	≤ 17.1.2
CVE-2023-32409US	high8.6OT critical	16.5% (97th)	KEV	no fix	2023-06-23	≤ 16.5
CVE-2023-28204US	medium6.5OT critical	14.3% (97th)	KEV	no fix	2023-06-23	≤ 16.5
CVE-2021-1789US	high8.8OT critical	14.0% (97th)	KEV	no fix	2021-04-02	≤ 14.0.3
CVE-2023-32373US	high8.8OT critical	12.2% (96th)	KEV	no fix	2023-06-23	≤ 16.5
CVE-2022-32893US	high8.8OT critical	9.93% (96th)	KEV	no fix	2022-08-24	≤ 15.6.1
CVE-2023-23529US	high8.8OT critical	9.43% (95th)	KEV	no fix	2023-02-27	≤ 16.3
CVE-2023-42917US	high8.8OT critical	9.29% (95th)	KEV	no fix	2023-11-30	≤ 17.1.2
CVE-2022-42856US	high8.8OT critical	8.52% (95th)	KEV	no fix	2022-12-15	≤ 16.2
CVE-2021-30952US	high7.8OT critical	6.96% (94th)	KEV	no fix	2021-08-24	≤ 15.2
CVE-2021-30663US	high8.8OT critical	3.52% (89th)	KEV	no fix	2021-09-08	≤ 14.1.1
CVE-2022-48503US	high8.8OT critical	3.21% (88th)	KEV	no fix	2023-08-14	≤ 15.6
CVE-2020-9850US	critical9.8	77.4% (100th)	Exploit	no fix	2020-06-09	≤ 13.1.1
CVE-2025-43541US	—	34.1% (98th)	Exploit	no fix	2025-12-17	≤ 26.2
CVE-2016-4622US	high8.8	20.4% (97th)	Exploit	no fix	2016-07-22	≤ 9.1.2
CVE-2019-8689US	high8.8	13.6% (96th)	Exploit	no fix	2019-12-18	≤ 12.1.2
CVE-2019-8518US	high8.8	11.2% (96th)	Exploit	no fix	2019-12-18	≤ 12.1
CVE-2019-6215US	high8.8	9.75% (96th)	Exploit	no fix	2019-03-05	≤ 12.0.3
CVE-2017-7041US	high8.8	9.50% (95th)	Exploit	no fix	2017-07-20	≤ 10.1.2
CVE-2017-2464US	high8.8	9.28% (95th)	Exploit	no fix	2017-04-02	≤ 10.1
CVE-2017-7042US	high8.8	8.88% (95th)	Exploit	no fix	2017-07-20	≤ 10.1.2
CVE-2019-8671US	high8.8	8.48% (95th)	Exploit	no fix	2019-12-18	≤ 12.1.2
CVE-2019-8611US	high8.8	8.48% (95th)	Exploit	no fix	2019-12-18	≤ 12.1.1
CVE-2017-2471US	high8.8	8.47% (95th)	Exploit	no fix	2017-04-02	≤ 10.1
CVE-2019-8623US	high8.8	8.35% (95th)	Exploit	no fix	2019-12-18	≤ 12.1.1
CVE-2019-8622US	high8.8	8.35% (95th)	Exploit	no fix	2019-12-18	≤ 12.1.1
CVE-2020-9802US	high8.8	8.27% (95th)	Exploit	no fix	2020-06-09	≤ 13.1.1
CVE-2017-2446US	high8.8	8.26% (95th)	Exploit	no fix	2017-04-02	≤ 10.1
CVE-2017-2468US	high8.8	7.79% (95th)	Exploit	no fix	2017-04-02	≤ 10.1
CVE-2019-8558US	high8.8	7.54% (94th)	Exploit	no fix	2019-12-18	≤ 12.1
CVE-2017-2466US	high8.8	6.84% (94th)	Exploit	no fix	2017-04-02	≤ 10.1
CVE-2017-2460US	high8.8	6.79% (94th)	Exploit	no fix	2017-04-02	≤ 10.1
CVE-2017-2455US	high8.8	6.77% (94th)	Exploit	no fix	2017-04-02	≤ 10.1
CVE-2017-2459US	high8.8	6.74% (94th)	Exploit	no fix	2017-04-02	≤ 10.1
CVE-2017-2454US	high8.8	6.74% (94th)	Exploit	no fix	2017-04-02	≤ 10.1
CVE-2017-2476US	high8.8	6.47% (94th)	Exploit	no fix	2017-04-02	≤ 10.1
CVE-2017-2479US	medium6.5	6.33% (94th)	Exploit	no fix	2017-04-02	≤ 10.1
CVE-2017-2470US	high8.8	6.27% (94th)	Exploit	no fix	2017-04-02	≤ 10.1

showing 50 of 385

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer186 CVEs
CWE-787Out-of-bounds Write74 CVEs
CWE-416Use After Free37 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor34 CVEs
CWE-20Improper Input Validation30 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')20 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')18 CVEs
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')15 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)382 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan