IA
Product
iOS and iPadOS
On CISA KEVExploited in the wild
649
CVEs
60
On KEV
10.0
Max CVSS
201
New 30D
Severity mix
Critical 47High 179Medium 246Low 11
Watch
Add iOS and iPadOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-65355 | 4.3 | Sep 14 | An information disclosure issue was addressed with improved state management Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-65352 | 4.3 | Sep 14 | An information disclosure issue was addressed with improved state management Affected: before 26.6.1 |
| CVE-2026-65331 | 4.3 | Aug 17 | This issue was addressed through improved state management Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-65351 | 4.3 | Aug 17 | This issue was addressed through improved state management Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-43795 | 4.3 | Aug 17 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-65340 | 4.3 | Aug 17 | This issue was addressed through improved state management Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-65337 | 4.3 | Aug 17 | This issue was addressed through improved state management Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-65336 | 4.3 | Aug 17 | This issue was addressed through improved state management Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-64784 | 4.3 | Aug 17 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-28984 | 4.3 | Aug 17 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.5 |
| CVE-2026-65335 | 4.3 | Aug 17 | This issue was addressed through improved state management Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-65334 | 4.3 | Aug 17 | A memory corruption issue was addressed with improved state management Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-65338 | 4.3 | Aug 17 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-65333 | 4.3 | Aug 17 | This issue was addressed through improved state management Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-64781 | 4.3 | Aug 17 | The issue was addressed with improved input validation Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-64780 | 4.3 | Aug 17 | The issue was addressed with improved checks Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-65332 | 4.3 | Aug 17 | This issue was addressed through improved state management Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-43708 | 4.3 | Jun 29 | The issue was addressed with improved input validation Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-28917 | 4.3 | May 11 | The issue was addressed with improved input validation Affected: before 18.7.9; before 26.5 |
| CVE-2026-39869 | 4.3 | May 11 | The issue was addressed with improved memory handling Affected: before 18.7.9; before 26.5 |
| CVE-2026-28901 | 4.3 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28971 | 4.3 | May 11 | The issue was addressed with improved UI handling Affected: before 26.5 |
| CVE-2026-65371 | 3.3 | Sep 14 | This issue was addressed with improved redaction of sensitive information Affected: before 26.6 |
| CVE-2026-84626 | 3.3 | Sep 14 | An information disclosure issue was addressed with improved state management Affected: before 26.7; before 27 |
| CVE-2026-86893 | 3.3 | Sep 14 | A permissions issue was addressed with additional restrictions Affected: before 27 |
| CVE-2026-86888 | 3.3 | Sep 14 | A permissions issue was addressed with additional restrictions Affected: before 27 |
| CVE-2026-86887 | 3.3 | Sep 14 | A privacy issue was addressed by removing sensitive data Affected: before 26.7; before 27 |
| CVE-2026-84530 | 3.3 | Sep 14 | An information disclosure issue was addressed with improved memory management Affected: before 26.7; before 27 |
| CVE-2026-43657 | 3.3 | Aug 25 | A permissions issue was addressed with additional restrictions Affected: before 26.5 |
| CVE-2026-28957 | 3.3 | May 11 | An issue with app access to camera metadata was addressed with improved logic Affected: before 18.7.9; before 26.5 |
| CVE-2026-64782 | 3.1 | Aug 17 | A memory corruption vulnerability was addressed with improved locking Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-64779 | 3.1 | Aug 17 | A memory corruption vulnerability was addressed with improved locking Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-84490 | 2.0 | Oct 20 | This issue was addressed through improved state management Affected: before 27 |
| CVE-2026-86925 New | – | Oct 26 | An authorization issue was addressed with improved state management Affected: before 27.2 |
| CVE-2026-84627 New | – | Oct 26 | A buffer overflow was addressed with improved bounds checking Affected: before 26.7.2; before 27 |
| CVE-2026-86972 New | – | Oct 26 | A buffer overflow was addressed with improved size validation Affected: before 26.7.2; before 27.2 |
| CVE-2026-113912 New | – | Oct 26 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.7; before 27.2 |
| CVE-2026-86964 New | – | Oct 26 | A null pointer dereference was addressed with improved input validation Affected: before 27 |
| CVE-2026-113904 New | – | Oct 26 | A use-after-free issue was addressed with improved memory management Affected: before 26.7.2; before 27.2 |
| CVE-2026-112616 New | – | Oct 26 | An authorization issue was addressed with improved access control Affected: before 27.2 |
| CVE-2026-112456 New | – | Oct 26 | An out-of-bounds write issue was addressed with improved input validation Affected: before 26.7.2; before 27.2 |
| CVE-2026-112682 New | – | Oct 26 | An input validation issue was addressed with improved input validation Affected: before 26.7.2; before 27.2 |
| CVE-2026-113949 New | – | Oct 26 | A type confusion issue was addressed with improved state management Affected: before 26.7.2; before 27.2 |
| CVE-2026-86991 New | – | Oct 26 | A buffer overflow was addressed with improved bounds checking Affected: before 26.7.2; before 27.2 |
| CVE-2026-65385 New | – | Oct 26 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.7.2; before 27.2 |
| CVE-2026-113908 New | – | Oct 26 | A privacy issue was addressed by removing sensitive data Affected: before 27.2 |
| CVE-2026-86968 New | – | Oct 26 | An access issue was addressed with improved access control Affected: before 27.2 |
| CVE-2026-112476 New | – | Oct 26 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.7.2; before 27.2 |
| CVE-2026-86987 New | – | Oct 26 | An authorization issue was addressed with improved entitlement checks Affected: before 27.2 |
| CVE-2026-112698 New | – | Oct 26 | The issue was addressed with improved memory handling Affected: before 26.7.2; before 27.2 |
The 500 most important CVEs for this product (exploited first, then by severity)