SentryFeed

Security news, read and ranked every 30 minutes.

Vendor track record

Apple

A track record, not a security rating. Every flaw in Apple's products that CISA has confirmed was exploited, since its list began. Bigger vendors have more products and more attackers looking, so compare patterns, not totals.

Exploited flaws
95in 9 products
Added to CISA's list in 2026
99 in 2025
Used by ransomware
0of 95, says CISA
Disclosure to CISA's list
17 daysmedian; 29 of 56 listed within 30 days

Exploited flaws by the year they were disclosed

The year in each CVE ID, roughly when the flaw became public. Recent years can still grow: flaws are often exploited, and listed, years later.

0 11 22 2014 2016 2018 2020 2022 2024 2026

Hover or tab through a year for its count.

Show as a table
Year disclosedExploited flaws
20141
20151
20163
20170
20181
20196
20209
202122
202211
202322
20245
202511
20263

Products exploited more than once

ProductFlawsFirst listedLatest
Multiple Products542021-11-032026-09-29
iOS, iPadOS, and macOS112021-11-032025-08-21
iOS82021-11-032022-12-14
macOS62021-11-032026-08-18
iOS and iPadOS52022-06-272026-03-05
iOS and macOS42021-11-032022-08-18
iOS, iPadOS, and watchOS42021-11-032023-09-11
OS X22022-02-102022-02-10

Latest on CISA's list

In the news

From CISA's Known Exploited Vulnerabilities catalogue. "Disclosure to CISA's list" uses NVD's publication date and leaves out the 2021-11-03 launch, when CISA added hundreds of older flaws at once; CISA often lists a flaw after attacks have begun, so it's an upper limit on how fast exploitation came.