IA
Product
iOS and iPadOS
On CISA KEVExploited in the wild
678
CVEs
60
On KEV
10.0
Max CVSS
201
New 30D
Severity mix
Critical 48High 186Medium 266Low 0
Watch
Add iOS and iPadOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-42916 In wildKEV | 6.5 | Nov 30 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Affected: before 17.1 |
| CVE-2023-28204 In wildKEV | 6.5 | Jun 23 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Affected: before 15.7; before 16.5 |
| CVE-2024-44309 In wildKEV | 6.3 | Nov 19 | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Affected: before 17.7.2; before 18.1.1 |
| CVE-2025-24200 In wildKEV | 6.1 | Feb 10 | Apple iOS and iPadOS Incorrect Authorization Vulnerability Affected: before 15.8.4; before 16.7.11; before 18.3.1 |
| CVE-2021-1879 In wildKEV | 6.1 | Apr 2 | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability Affected: before 14.4 |
| CVE-2025-43520 In wildKEV | 5.5 | Dec 12 | Apple Multiple Products Classic Buffer Overflow Vulnerability Affected: before 18.7.2; before 26.1 |
| CVE-2023-41991 In wildKEV | 5.5 | Sep 21 | Apple Multiple Products Improper Certificate Validation Vulnerability Affected: before 16.7 |
| CVE-2023-38606 In wildKEV | 5.5 | Jul 26 | Apple Multiple Products Kernel Unspecified Vulnerability Affected: before 16.6; before 15.7 |
| CVE-2020-27950 In wildKEV | 5.5 | Dec 8 | Apple Multiple Products Memory Initialization Vulnerability Affected: before 14.2 |
| CVE-2025-43200 In wildKEV | 4.2 | Jun 16 | Apple Multiple Products Unspecified Vulnerability Affected: before 15.8.4; before 16.7.11; before 18.3.1 |
| CVE-2026-65414 | 9.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-84609 | 9.8 | Sep 14 | A permissions issue was addressed with improved path validation Affected: before 27 |
| CVE-2026-84561 | 9.8 | Sep 14 | A double free issue was addressed with improved memory management Affected: before 26.7; before 27 |
| CVE-2026-43757 | 9.8 | Jul 27 | An out-of-bounds read was addressed with improved bounds checking Affected: before 18.7.10 |
| CVE-2026-43805 | 9.8 | Jul 27 | A race condition was addressed with improved state handling Affected: before 26.6 |
| CVE-2026-43809 | 9.8 | Jul 27 | An out-of-bounds read was addressed with improved bounds checking Affected: before 18.7.10 |
| CVE-2026-43799 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 18.7.10; before 26.6 |
| CVE-2026-64700 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 18.7.10; before 26.6 |
| CVE-2026-64720 | 9.8 | Jul 27 | A race condition was addressed with improved state handling Affected: before 26.6 |
| CVE-2026-43812 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 18.7.10; before 26.6 |
| CVE-2026-64746 | 9.8 | Jul 27 | An authorization issue was addressed with improved validation Affected: before 18.7.10; before 26.6 |
| CVE-2026-43730 | 9.8 | Jul 27 | A permissions issue was addressed with additional restrictions Affected: before 26.6 |
| CVE-2026-43803 | 9.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 18.7.10; before 26.6 |
| CVE-2026-64770 | 9.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 18.7.10; before 26.6 |
| CVE-2026-64726 | 9.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.6 |
| CVE-2026-64771 | 9.8 | Jul 27 | A buffer overflow was addressed with improved bounds checking Affected: before 18.7.10; before 26.6 |
| CVE-2026-43814 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-43802 | 9.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 18.7.10 |
| CVE-2026-43822 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 18.7.10; before 26.6 |
| CVE-2026-64751 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64729 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-64695 | 9.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 18.7.10 |
| CVE-2026-64772 | 9.8 | Jul 27 | An out-of-bounds write issue was addressed with improved input validation Affected: before 18.7.10; before 26.6 |
| CVE-2026-43769 | 9.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 18.7.10; before 26.6 |
| CVE-2026-64733 | 9.8 | Jul 27 | This issue was addressed with improved data protection Affected: before 26.6 |
| CVE-2026-28928 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-43748 | 9.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-64769 | 9.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 18.7.10; before 26.6 |
| CVE-2026-64774 | 9.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 18.7.10; before 26.6 |
| CVE-2026-43807 | 9.8 | Jul 27 | A buffer overflow was addressed with improved bounds checking Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-64762 | 9.8 | Jul 27 | An out-of-bounds read was addressed with improved bounds checking Affected: before 18.7.10 |
| CVE-2026-64738 | 9.8 | Jul 27 | A permissions issue was addressed with additional restrictions Affected: before 18.7.10 |
| CVE-2026-43810 | 9.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.6 |
| CVE-2026-64775 | 9.8 | Jul 27 | A memory initialization issue was addressed with improved memory handling Affected: before 26.6 |
| CVE-2026-43778 | 9.8 | Jul 27 | A use after free issue was addressed with improved memory management Affected: before 18.7.10; before 26.6 |
| CVE-2026-28858 | 9.8 | Mar 25 | A buffer overflow was addressed with improved bounds checking Affected: before 26.4 |
| CVE-2026-64740 | 9.3 | Jul 27 | A parsing issue in the handling of directory paths was addressed with improved path validation Affected: before 18.7.10; before 26.6 |
| CVE-2026-84625 | 9.1 | Sep 14 | A permissions issue was addressed with additional sandbox restrictions Affected: before 27 |
| CVE-2026-86881 | 9.1 | Sep 14 | A certificate validation issue was addressed with improved certificate validation Affected: before 26.7; before 27 |
| CVE-2026-39868 | 9.1 | Jun 29 | This issue was addressed with improved input validation Affected: before 18.7.10; before 26.5.2 |
The 500 most important CVEs for this product (exploited first, then by severity)