Skip to content

Vendors

Apple

343records10productslast change2026-08-25RSSas of the 2026-09-07 snapshot

Rows per week, last 26 weeks

279 rows in the last 26 weeks, 0 in the week to 2026-09-070 this week

When Apple edits: same day → over a year

apple: 7 counted rows by the interval to the first recorded revision: 1 same day, 1 1 to 7 days, 4 31 to 90 days, 1 over a year7 counted rows as publisher

Rows, not records: one record that changed for four products is four rows and one record. 3 of the 343 records raised a stated fix version; that is the count the publisher scorecard rates.

Choose a product · 10 products

10 of 10 products

Open the full product index. Counts beside products are records and are not added across products.

Every change, newest first

lines 1 to 20 of 26 · standing on 541 of 548 rows
Every counted change to a CVE or CISA KEV record naming Apple, newest first. A line standing for the same change across several records or products says how many and opens to every one.
Changed on, The day the commit that carried this change was read. Where the same change spans several days, the first and the last, never a midpoint. Not dated means no commit could be located for the row.ChangeCVEProductWhat the record says now
2023-05-19 to2026-08-25Product addedmacOSnot named as affected at publication, now names macos
2026-08-25Product addedCVE-2026-28984macOSnot named as affected at publication, now names macos
2026-08-25Product addedCVE-2026-43667macOSnot named as affected at publication, now names macos
68 more rows in this change are not listed here. Open all 70 rows
2023-07-26 to2026-08-25Product addedSafarinot named as affected at publication, now names safari
2026-08-25Product addedCVE-2026-28984Safarinot named as affected at publication, now names safari
2026-08-18Product addedCVE-2026-65331Safarinot named as affected at publication, now names safari
75 more rows in this change are not listed here. Open all 77 rows
2023-07-26 to2026-08-25Product addedtvOSnot named as affected at publication, now names tvos
2026-08-25Product addedCVE-2026-28984tvOSnot named as affected at publication, now names tvos
2026-08-25Product addedCVE-2026-39877tvOSnot named as affected at publication, now names tvos
96 more rows in this change are not listed here. Open all 98 rows
2024-02-21 to2026-08-25Product addedvisionOSnot named as affected at publication, now names visionos
2026-08-25Product addedCVE-2026-28984visionOSnot named as affected at publication, now names visionos
2026-08-25Product addedCVE-2026-43667visionOSnot named as affected at publication, now names visionos
60 more rows in this change are not listed here. Open all 62 rows
2023-07-27 to2026-08-25Product addedwatchOSnot named as affected at publication, now names watchos
2026-08-25Product addedCVE-2026-28984watchOSnot named as affected at publication, now names watchos
2026-08-25Product addedCVE-2026-43667watchOSnot named as affected at publication, now names watchos
106 more rows in this change are not listed here. Open all 108 rows
2023-07-26 to2026-08-21Product addediOS And iPadOSnot named as affected at publication, now names ios and ipados
2026-08-21Product addedCVE-2026-28896iOS And iPadOSnot named as affected at publication, now names ios and ipados
2026-08-17Product addedCVE-2026-43757iOS And iPadOSnot named as affected at publication, now names ios and ipados
105 more rows in this change are not listed here. Open all 107 rows
2026-08-18Added to CISA KEVCVE-2026-65400macOSlisted by CISA 2026-08-18federal fix due 2026-08-21
2026-04-02Fix version movedCVE-2025-24220iPadOSstated at publication 17.7, now states 17.7.9
2026-04-02Product addedCVE-2025-24259iPadOSnot named as affected at publication, now names ipados
2026-04-02Fix version movedCVE-2025-24213iPadOSstated at publication 17.7, now states 17.7.7
2026-03-20Added to CISA KEVMultiple Productslisted by CISA 2026-03-20federal fix due 2026-04-03
2026-03-20Added to CISA KEVCVE-2025-31277Multiple Productslisted by CISA 2026-03-20federal fix due 2026-04-03
2026-03-20Added to CISA KEVCVE-2025-43510Multiple Productslisted by CISA 2026-03-20federal fix due 2026-04-03
1 more row in this change is not listed here. Open all 3 rows
2026-03-05Added to CISA KEVMultiple Productslisted by CISA 2026-03-05federal fix due 2026-03-26
2026-03-05Added to CISA KEVCVE-2021-30952Multiple Productslisted by CISA 2026-03-05federal fix due 2026-03-26
2026-03-05Added to CISA KEVCVE-2023-43000Multiple Productslisted by CISA 2026-03-05federal fix due 2026-03-26
2026-03-05Added to CISA KEVCVE-2023-41974iOS and iPadOSlisted by CISA 2026-03-05federal fix due 2026-03-26
2026-02-12Added to CISA KEVCVE-2026-20700Multiple Productslisted by CISA 2026-02-12federal fix due 2026-03-05
2025-12-15Added to CISA KEVCVE-2025-43529Multiple Productslisted by CISA 2025-12-15federal fix due 2026-01-05
2025-10-20Added to CISA KEVCVE-2022-48503Multiple Productslisted by CISA 2025-10-20federal fix due 2025-11-10
2025-08-21Added to CISA KEVCVE-2025-43300iOS, iPadOS, and macOSlisted by CISA 2025-08-21federal fix due 2025-09-11
2025-06-16Added to CISA KEVCVE-2025-43200Multiple Productslisted by CISA 2025-06-16federal fix due 2025-07-07
2025-05-13Fix version movedCVE-2025-242133 productsstated at publication 18.4, now states 18.5
2025-05-13Fix version movedCVE-2025-24213iOS And iPadOSstated at publication 18.4, now states 18.5
2025-05-13Fix version movedCVE-2025-24213Safaristated at publication 18.4, now states 18.5
1 more row in this change is not listed here. Open all 3 rows
2025-05-13Fix version movedCVE-2025-24213macOSstated at publication 15.4, now states 15.5

A line that names a count is the same change on that many records or products, shown once; it opens to every member. A closed line is not reached by find-in-page; the flat view (Every row, flat →) is. Only counted changes are here: a change a kind's false-positive filter refused, such as a product line being renumbered, is in no figure on this page.

Data sources and quality

One vendor, every counted kind of change: the rows where a CVE record or a CISA KEV entry naming Apple changed after publication. The vendor name is the record's own text, compared without regard to case, so one organisation can appear under more than one spelling and this page holds the spellings that share its web address. Rows and records are different numbers and are never added together.

Not counted: a product line being renumbered, a boundary already named in the record's own description, and the other refusal classes are filtered as false positives and are in no figure here, so this page is what survived those filters rather than everything the catalog changed for this vendor.

Not checked: a record published before 2023 cannot have its state at publication recovered and was never compared, and a CISA KEV listing added before the first mirrored commit was never seen changing, so an absence from this page is not evidence that a record held.

How every one of these figures is measured, in full →

Shipped snapshot computed 2026-09-07 from catalog commit f5f9fc6fd7dc. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.