Skip to content
COOEY

FAIL › dossier

iOS, iPadOS, and macOS

PRODUCT

· dossier confidence 33%

Apple's iOS, iPadOS, and macOS operating systems have a concerning history of high-severity vulnerabilities, including remote code execution flaws. Recent updates have incorporated AI-assisted security research, highlighting the ongoing challenge of securing these platforms.

Failure events
11
Zero-days
0
RCEs
11
On KEV
11
Critical
0
Worst shame
90
PROFILE
CategoryOperating SystemsWhat they doiOS, iPadOS, and macOS are Apple's operating systems for mobile devices and computers, respectively. They provide a platform for applications and user interaction. Websitehttps://www.apple.com/ ↗
SECURITY POSTURE

iOS, iPadOS, and macOS have a history of high-severity remote code execution vulnerabilities, including memory corruption and type confusion bugs. Recent updates have included AI-assisted security research credits.

Notable failures
  • CVE-2023-41064 (RCE) - ImageIO buffer overflow
  • CVE-2022-32917 (RCE) - Apple kernel vulnerability
  • CVE-2022-22620 (RCE) - WebKit use-after-free
  • CVE-2021-30858 (RCE) - WebKit use-after-free
  • CVE-2025-43300 (Out-of-bounds write)
  • CVE-2023-28206 (RCE) - IOSurfaceAccelerator out-of-bounds write
Patterns: Repeated RCE vulnerabilities; WebKit memory corruption issues; Out-of-bounds write vulnerabilities; Kernel privilege escalation
FAILURE HISTORY · 11
DATEEVENTSEVSUMMARY
2023-04-10 CVE-2023-28206 high Apple iOS, iPadOS, and macOS had a critical kernel-level vulnerability allowing apps to execute arbitrary code with kernel privileges.
2021-11-03 CVE-2021-30869 high A type confusion vulnerability in Apple's XNU kernel allowed malicious apps to execute code with kernel privileges, and it was actively exploited in the wild.
2022-02-11 CVE-2022-22620 high Apple's WebKit in iOS, iPadOS, and macOS suffered a use-after-free vulnerability allowing remote code execution via malicious web content.
2021-11-03 CVE-2021-1871 high Apple's WebKit in iOS, iPadOS, and macOS had a remote code execution vulnerability that was actively exploited in the wild.
2021-11-03 CVE-2021-1870 high Apple's WebKit in iOS, iPadOS, and macOS had a remote code execution vulnerability that was actively exploited in the wild.
2021-11-03 CVE-2021-30858 high Apple's iOS, iPadOS, and macOS WebKit contained a use-after-free vulnerability allowing remote code execution via malicious web content.
2025-08-21 CVE-2025-43300 high Apple iOS, iPadOS, and macOS had an unpatched out-of-bounds write vulnerability exploited in the wild.
2023-03-30 CVE-2021-30900 high Apple iOS, iPadOS, and macOS had an unpatched RCE flaw exploited in the wild
2022-09-14 CVE-2022-32917 high Apple iOS, iPadOS, and macOS had a kernel-level RCE flaw actively exploited by attackers.
2022-09-08 CVE-2020-9934 high Apple iOS, iPadOS, and macOS had an unpatched input validation vulnerability allowing local attackers to view sensitive user information.
2023-09-11 CVE-2023-41064 high Maliciously crafted images triggered a buffer overflow vulnerability in Apple's ImageIO, potentially enabling code execution and being actively exploited in the wild.
DOSSIER SOURCES
Open questions: What is Apple's process for addressing legacy vulnerabilities? · What is the extent of Apple's software supply chain risk? · How does Apple's vulnerability disclosure policy impact DIB/CMMC compliance?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-07-19 04:48:07.999312+00:00