IA
Product
iOS and iPadOS
On CISA KEVExploited in the wild
904
CVEs
60
On KEV
10.0
Max CVSS
200
New 30D
Severity mix
Critical 62High 240Medium 198Low 0
Watch
Add iOS and iPadOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28935 | 7.5 | Sep 14 | The issue was addressed with improved memory handling Affected: before 26.6.1 |
| CVE-2026-84629 | 7.5 | Sep 14 | This issue was addressed with additional entitlement checks Affected: before 27 |
| CVE-2026-65410 | 7.5 | Sep 14 | The issue was addressed with improved checks Affected: before 26.7; before 27 |
| CVE-2026-28938 | 7.5 | Sep 14 | A privacy issue was addressed by moving sensitive data Affected: before 26.6 |
| CVE-2026-65343 | 7.5 | Aug 17 | A use after free issue was addressed with improved memory management Affected: before 26.6.1 |
| CVE-2025-46311 | 7.5 | May 12 | An inconsistent user interface issue was addressed with improved state management Affected: before 18.7.3; before 26.2 |
| CVE-2026-28872 | 7.5 | May 11 | A resource exhaustion issue was addressed with improved input validation Affected: before 18.7.9; before 26.4 |
| CVE-2026-28983 | 7.5 | May 11 | A type confusion issue was addressed with improved checks Affected: before 18.7.9; before 26.5 |
| CVE-2026-43668 | 7.5 | May 11 | A use after free issue was addressed with improved memory management Affected: before 18.7.9; before 26.5 |
| CVE-2026-28936 | 7.5 | May 11 | The issue was addressed with improved checks Affected: before 18.7.9; before 26.5 |
| CVE-2026-28873 | 7.5 | May 11 | This issue was addressed with additional entitlement checks Affected: before 18.7.9; before 26.4 |
| CVE-2026-43654 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 18.7.9; before 26.5 |
| CVE-2026-28906 | 7.5 | May 11 | This issue was addressed through improved state management Affected: before 18.7.9; before 26.5 |
| CVE-2026-43658 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.5 |
| CVE-2026-28952 | 7.5 | May 11 | An integer overflow was addressed with improved input validation Affected: before 18.7.9 |
| CVE-2026-28905 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-43661 | 7.5 | May 11 | A buffer overflow issue was addressed with improved memory handling Affected: before 18.7.10; before 26.5; before 26.7 |
| CVE-2026-28913 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28944 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28987 | 7.5 | May 11 | A logging issue was addressed with improved data redaction Affected: before 18.7.9; before 26.5 |
| CVE-2026-28991 | 7.5 | May 11 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.5 |
| CVE-2026-28929 | 7.5 | May 11 | A logic issue was addressed with improved checks Affected: before 18.7.9 |
| CVE-2026-28883 | 7.5 | May 11 | A use-after-free issue was addressed with improved memory management Affected: before 26.5 |
| CVE-2026-28964 | 7.5 | May 11 | An inconsistent user interface issue was addressed with improved state management Affected: before 26.5 |
| CVE-2026-28860 | 7.5 | May 11 | The issue was addressed with improved input validation Affected: before 18.7.7; before 26.4 |
| CVE-2026-28965 | 7.5 | May 11 | A privacy issue was addressed with improved checks Affected: before 26.5 |
| CVE-2026-28990 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.5 |
| CVE-2026-28986 | 7.5 | May 11 | A race condition was addressed with additional validation Affected: before 18.7.9; before 26.5 |
| CVE-2026-28969 | 7.5 | May 11 | A use after free issue was addressed with improved memory management Affected: before 18.7.9; before 26.5; before 27 |
| CVE-2026-43660 | 7.5 | May 11 | A validation issue was addressed with improved logic Affected: before 18.7.9; before 26.5 |
| CVE-2026-28904 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 18.7.9; before 26.5 |
| CVE-2026-28953 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 18.7.9; before 26.5 |
| CVE-2026-28962 | 7.5 | May 11 | This issue was addressed with improved access restrictions Affected: before 18.7.9; before 26.5 |
| CVE-2026-28974 | 7.5 | May 11 | This issue was addressed with improved checks to prevent unauthorized actions Affected: before 26.5 |
| CVE-2026-28954 | 7.5 | May 11 | A file quarantine bypass was addressed with additional checks Affected: before 18.7.9 |
| CVE-2026-28846 | 7.5 | May 11 | A buffer overflow was addressed with improved bounds checking Affected: before 18.7.9; before 26.5 |
| CVE-2026-28943 | 7.5 | May 11 | A logging issue was addressed with improved data redaction Affected: before 18.7.9; before 26.5 |
| CVE-2026-28959 | 7.5 | May 11 | A buffer overflow was addressed with improved bounds checking Affected: before 18.7.9; before 26.5 |
| CVE-2026-28865 | 7.5 | Mar 25 | An authentication issue was addressed with improved state management Affected: before 18.7.7; before 26.4 |
| CVE-2026-28874 | 7.5 | Mar 25 | The issue was addressed with improved checks Affected: before 26.4 |
| CVE-2026-28875 | 7.5 | Mar 25 | A buffer overflow was addressed with improved bounds checking Affected: before 26.4 |
| CVE-2026-28855 | 7.5 | Mar 25 | A permissions issue was addressed with additional restrictions Affected: before 26.3 |
| CVE-2026-28876 | 7.5 | Mar 25 | A parsing issue in the handling of directory paths was addressed with improved path validation Affected: before 18.7.7; before 26.4 |
| CVE-2026-28894 | 7.5 | Mar 25 | A denial-of-service issue was addressed with improved input validation Affected: before 26.4 |
| CVE-2026-20652 | 7.5 | Feb 11 | The issue was addressed with improved memory handling Affected: before 18.7.5; before 26.3 |
| CVE-2026-20649 | 7.5 | Feb 11 | A logging issue was addressed with improved data redaction Affected: before 26.3 |
| CVE-2025-46290 | 7.5 | Feb 11 | A logic issue was addressed with improved checks Affected: before 18.7.3; before 26.2 |
| CVE-2026-20660 | 7.5 | Feb 11 | A path handling issue was addressed with improved logic Affected: before 18.7.5; before 26.3 |
| CVE-2026-20650 | 7.5 | Feb 11 | A denial-of-service issue was addressed with improved validation Affected: before 26.3 |
| CVE-2025-43542 | 7.5 | Dec 12 | This issue was addressed with improved state management Affected: before 18.7.3; before 26.2 |
The 500 most important CVEs for this product (exploited first, then by severity)