IA
Product
iOS and iPadOS
On CISA KEVExploited in the wild
904
CVEs
60
On KEV
10.0
Max CVSS
200
New 30D
Severity mix
Critical 62High 240Medium 198Low 0
Watch
Add iOS and iPadOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-43347 | 9.8 | Sep 15 | This issue was addressed by removing the vulnerable code Affected: before 26 |
| CVE-2025-43186 | 9.8 | Jul 29 | The issue was addressed with improved memory handling Affected: before 18.6 |
| CVE-2025-43209 | 9.8 | Jul 29 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 18.6 |
| CVE-2025-43234 | 9.8 | Jul 29 | Multiple memory corruption issues were addressed with improved input validation Affected: before 18.6 |
| CVE-2026-64740 | 9.3 | Jul 27 | A parsing issue in the handling of directory paths was addressed with improved path validation Affected: before 18.7.10; before 26.6 |
| CVE-2026-20688 | 9.3 | Mar 25 | A path handling issue was addressed with improved validation Affected: before 26.4 |
| CVE-2026-84625 | 9.1 | Sep 14 | A permissions issue was addressed with additional sandbox restrictions Affected: before 27 |
| CVE-2026-86881 | 9.1 | Sep 14 | A certificate validation issue was addressed with improved certificate validation Affected: before 26.7; before 27 |
| CVE-2026-39868 | 9.1 | Jun 29 | This issue was addressed with improved input validation Affected: before 18.7.10; before 26.5.2 |
| CVE-2025-31229 | 9.1 | Jul 29 | A logic issue was addressed with improved checks Affected: before 18.6 |
| CVE-2025-31281 | 9.1 | Jul 29 | An input validation issue was addressed with improved memory handling Affected: before 18.6 |
| CVE-2026-20677 | 9.0 | Feb 11 | A race condition was addressed with improved handling of symbolic links Affected: before 18.7.5; before 26.3 |
The 500 most important CVEs for this product (exploited first, then by severity)