Apple Uses LLMs for vuln discovery
CPE vendor key: apple ·
3,439 CVEs published in the last 24 months.
CVEs (365 d)
2,379
▲ +2 vs prior 30d
Avg CVSS (365 d)
6.92
over 2,379 CVEs
Avg EPSS pct (365 d)
0.19
higher = more likely exploited
KEV hit rate (365 d)
0.5%
13 of 2,379 added to CISA KEV
LLM-credited CVEs
239
Openai 239
Monthly CVE volume — last 24 months
Each point is one calendar month. Bars in the
severity card to the right slice the same volume by CVSS band.
Severity mix
Stacked by CVSS band (Critical / High / Medium /
Low) using the best available metric per CVE.
Top affected products (24 mo)
3,094
918
778
445
375
356
190
16
4
2
Distinct CVEs that include each product in their
CPE configuration.
Top CWEs (24 mo)
507
299
288
243
206
172
120
116
104
79
Distinct CVEs assigned each weakness.
Recent CISA KEV adds (last 12 months)
| Added | CVE | Product | KEV name |
|---|---|---|---|
| 2026-08-18 | CVE-2026-65400 | macOS | Apple macOS Improper Authentication Vulnerability |
| 2026-03-20 | CVE-2025-43520 | Multiple Products | Apple Multiple Products Classic Buffer Overflow Vulnerability |
| 2026-03-20 | CVE-2025-43510 | Multiple Products | Apple Multiple Products Improper Locking Vulnerability |
| 2026-03-20 | CVE-2025-31277 | Multiple Products | Apple Multiple Products Buffer Overflow Vulnerability |
| 2026-03-05 | CVE-2023-43000 | Multiple Products | Apple Multiple products Use-After-Free Vulnerability |
| 2026-03-05 | CVE-2023-41974 | iOS and iPadOS | Apple iOS and iPadOS Use-After-Free Vulnerability |
| 2026-03-05 | CVE-2021-30952 | Multiple Products | Apple Multiple Products Integer Overflow or Wraparound Vulnerability |
| 2026-02-12 | CVE-2026-20700 | Multiple Products | Apple Multiple Buffer Overflow Vulnerability |
| 2025-12-15 | CVE-2025-43529 | Multiple Products | Apple Multiple Products Use-After-Free WebKit Vulnerability |
| 2025-10-20 | CVE-2022-48503 | Multiple Products | Apple Multiple Products Unspecified Vulnerability |
Filtered to KEV entries whose CISA vendor or product name matches this
vendor exactly, to drop cross-OS noise (e.g. third-party Windows apps
that CPE-map to Microsoft).
LLM-credited CVEs from this vendor
| Published | CVE | LLM family | Model(s) |
|---|---|---|---|
| 2026-08-18 | CVE-2026-76040 | openai | OpenAI |
| 2026-07-20 | CVE-2026-15899 | openai | OpenAI |
| 2026-07-01 | CVE-2026-14424 | openai | OpenAI |
| 2026-07-01 | CVE-2026-14397 | openai | OpenAI |
| 2026-07-01 | CVE-2026-14385 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14154 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14153 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14148 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14144 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14143 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14139 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14137 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14136 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14128 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14125 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14123 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14115 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14112 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14111 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14108 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14107 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14101 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14100 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14099 | openai | OpenAI |
| 2026-06-30 | CVE-2026-14098 | openai | OpenAI |
From
mythos_attributed_cves: CVEs whose NVD description
or vendor advisory credits an LLM-assisted discovery. Confidence is
high for every row.
Generated 23 August 2026 00:24 UTC .