IA
Product
iOS and iPadOS
On CISA KEVExploited in the wild
880
CVEs
60
On KEV
10.0
Max CVSS
200
New 30D
Severity mix
Critical 57High 232Medium 211Low 0
Watch
Add iOS and iPadOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-84507 | 7.8 | Sep 14 | A race condition was addressed with improved state handling Affected: before 26.7; before 27 |
| CVE-2026-84511 | 7.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84497 | 7.8 | Sep 14 | A buffer overflow was addressed with improved size validation Affected: before 26.7; before 27 |
| CVE-2026-43684 | 7.8 | Sep 14 | A use-after-free issue was addressed with improved memory management Affected: before 26.7 |
| CVE-2026-43702 | 7.8 | Sep 14 | The issue was addressed with improved memory handling Affected: before 26.6; before 26.7 |
| CVE-2026-43688 | 7.8 | Sep 14 | A memory corruption issue was addressed with improved input validation Affected: before 27 |
| CVE-2026-65344 | 7.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-43689 | 7.8 | Sep 14 | A permissions issue was addressed with additional restrictions Affected: before 26.7; before 27 |
| CVE-2026-43673 | 7.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.6 |
| CVE-2026-43776 | 7.8 | Jul 27 | A buffer overflow was addressed with improved bounds checking Affected: before 18.7.10; before 26.6 |
| CVE-2026-64716 | 7.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.6 |
| CVE-2026-64766 | 7.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 18.7.10; before 26.6 |
| CVE-2026-43711 | 7.8 | Jul 27 | A memory corruption issue was addressed with improved memory handling Affected: before 18.7.10; before 26.6 |
| CVE-2026-64747 | 7.8 | Jul 27 | A buffer overflow was addressed with improved size validation Affected: before 18.7.10; before 26.6 |
| CVE-2026-39877 | 7.8 | Jul 27 | A memory corruption issue was addressed with improved memory handling Affected: before 18.7.10; before 26.5 |
| CVE-2026-64764 | 7.8 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 18.7.10; before 26.6 |
| CVE-2026-64749 | 7.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.6 |
| CVE-2026-64765 | 7.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 18.7.10; before 26.6 |
| CVE-2026-43729 | 7.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.6 |
| CVE-2026-43733 | 7.8 | Jul 27 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.6 |
| CVE-2026-43780 | 7.8 | Jul 27 | An integer overflow was addressed with improved input validation Affected: before 26.6 |
| CVE-2026-64758 | 7.8 | Jul 27 | The issue was addressed with improved bounds checks Affected: before 26.6; before 26.7 |
| CVE-2026-43723 | 7.8 | Jul 27 | A path handling issue was addressed with improved validation Affected: before 18.7.10; before 26.6 |
| CVE-2026-64763 | 7.8 | Jul 27 | An out-of-bounds write issue was addressed by removing the vulnerable code Affected: before 18.7.10; before 26.6 |
| CVE-2026-43724 | 7.8 | Jun 29 | The issue was addressed with improved input sanitization Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-28951 | 7.8 | May 11 | An authorization issue was addressed with improved state management Affected: before 18.7.9; before 26.5 |
| CVE-2026-20698 | 7.8 | Mar 25 | The issue was addressed with improved memory handling Affected: before 26.4 |
| CVE-2026-20615 | 7.8 | Feb 11 | A path handling issue was addressed with improved validation Affected: before 26.3 |
| CVE-2026-20611 | 7.8 | Feb 11 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 18.7.5; before 26.3 |
| CVE-2026-20626 | 7.8 | Feb 11 | This issue was addressed with improved checks Affected: before 26.3 |
| CVE-2024-44238 | 7.8 | Jan 16 | The issue was addressed with improved bounds checks Affected: before 18.1 |
| CVE-2025-43512 | 7.8 | Dec 12 | A logic issue was addressed with improved checks Affected: before 18.7.3 |
| CVE-2025-46285 | 7.8 | Dec 12 | An integer overflow was addressed by adopting 64-bit timestamps Affected: before 18.7.3; before 26.2 |
| CVE-2025-43386 | 7.8 | Nov 4 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 18.7.2; before 26.1 |
| CVE-2025-43407 | 7.8 | Nov 4 | This issue was addressed with improved entitlements Affected: before 18.7.2; before 26.1 |
| CVE-2025-43361 | 7.8 | Nov 4 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26 |
| CVE-2025-43372 | 7.8 | Sep 15 | The issue was addressed with improved input validation Affected: before 26 |
| CVE-2022-32932 | 7.8 | Nov 1 | The issue was addressed with improved memory handling Affected: before 16.1; before 15.7 |
| CVE-2022-32939 | 7.8 | Nov 1 | The issue was addressed with improved bounds checks Affected: before 16.1; before 15.7 |
| CVE-2026-28896 | 7.7 | Jul 27 | The issue was addressed with improved memory handling Affected: before 26.4 |
| CVE-2026-28960 | 7.5 | Sep 14 | A denial-of-service issue was addressed with improved validation Affected: before 18.7.10 |
| CVE-2026-86895 | 7.5 | Sep 14 | An information disclosure issue was addressed with improved state management Affected: before 27 |
| CVE-2026-86904 | 7.5 | Sep 14 | A privacy issue was addressed with improved state management Affected: before 26.7; before 27 |
| CVE-2026-84606 | 7.5 | Sep 14 | A privacy issue was addressed with improved handling of identifiers Affected: before 27 |
| CVE-2026-64761 | 7.5 | Sep 14 | A privacy issue was addressed with improved handling of user preferences Affected: before 27 |
| CVE-2026-84623 | 7.5 | Sep 14 | An authorization issue was addressed with improved state management Affected: before 26.7; before 27 |
| CVE-2026-84598 | 7.5 | Sep 14 | A path traversal issue was addressed with improved path validation Affected: before 26.7; before 27 |
| CVE-2026-28935 | 7.5 | Sep 14 | The issue was addressed with improved memory handling Affected: before 26.6.1 |
| CVE-2026-84629 | 7.5 | Sep 14 | This issue was addressed with additional entitlement checks Affected: before 27 |
| CVE-2026-65410 | 7.5 | Sep 14 | The issue was addressed with improved checks Affected: before 26.7; before 27 |
The 500 most important CVEs for this product (exploited first, then by severity)