IA
Product
iOS and iPadOS
On CISA KEVExploited in the wild
904
CVEs
60
On KEV
10.0
Max CVSS
200
New 30D
Severity mix
Critical 62High 240Medium 198Low 0
Watch
Add iOS and iPadOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28969 | 7.5 | May 11 | A use after free issue was addressed with improved memory management Affected: before 18.7.9; before 26.5; before 27 |
| CVE-2026-43660 | 7.5 | May 11 | A validation issue was addressed with improved logic Affected: before 18.7.9; before 26.5 |
| CVE-2026-28904 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 18.7.9; before 26.5 |
| CVE-2026-28953 | 7.5 | May 11 | The issue was addressed with improved memory handling Affected: before 18.7.9; before 26.5 |
| CVE-2026-28962 | 7.5 | May 11 | This issue was addressed with improved access restrictions Affected: before 18.7.9; before 26.5 |
| CVE-2026-28974 | 7.5 | May 11 | This issue was addressed with improved checks to prevent unauthorized actions Affected: before 26.5 |
| CVE-2026-28954 | 7.5 | May 11 | A file quarantine bypass was addressed with additional checks Affected: before 18.7.9 |
| CVE-2026-28846 | 7.5 | May 11 | A buffer overflow was addressed with improved bounds checking Affected: before 18.7.9; before 26.5 |
| CVE-2026-28943 | 7.5 | May 11 | A logging issue was addressed with improved data redaction Affected: before 18.7.9; before 26.5 |
| CVE-2026-28959 | 7.5 | May 11 | A buffer overflow was addressed with improved bounds checking Affected: before 18.7.9; before 26.5 |
| CVE-2026-28865 | 7.5 | Mar 25 | An authentication issue was addressed with improved state management Affected: before 18.7.7; before 26.4 |
| CVE-2026-28874 | 7.5 | Mar 25 | The issue was addressed with improved checks Affected: before 26.4 |
| CVE-2026-28875 | 7.5 | Mar 25 | A buffer overflow was addressed with improved bounds checking Affected: before 26.4 |
| CVE-2026-28855 | 7.5 | Mar 25 | A permissions issue was addressed with additional restrictions Affected: before 26.3 |
| CVE-2026-28876 | 7.5 | Mar 25 | A parsing issue in the handling of directory paths was addressed with improved path validation Affected: before 18.7.7; before 26.4 |
| CVE-2026-28894 | 7.5 | Mar 25 | A denial-of-service issue was addressed with improved input validation Affected: before 26.4 |
| CVE-2026-20652 | 7.5 | Feb 11 | The issue was addressed with improved memory handling Affected: before 18.7.5; before 26.3 |
| CVE-2026-20649 | 7.5 | Feb 11 | A logging issue was addressed with improved data redaction Affected: before 26.3 |
| CVE-2025-46290 | 7.5 | Feb 11 | A logic issue was addressed with improved checks Affected: before 18.7.3; before 26.2 |
| CVE-2026-20660 | 7.5 | Feb 11 | A path handling issue was addressed with improved logic Affected: before 18.7.5; before 26.3 |
| CVE-2026-20650 | 7.5 | Feb 11 | A denial-of-service issue was addressed with improved validation Affected: before 26.3 |
| CVE-2025-43542 | 7.5 | Dec 12 | This issue was addressed with improved state management Affected: before 18.7.3; before 26.2 |
| CVE-2025-43494 | 7.5 | Dec 12 | A mail header parsing issue was addressed with improved checks Affected: before 18.7.2; before 26.1 |
| CVE-2025-43502 | 7.5 | Nov 4 | A privacy issue was addressed by removing sensitive data Affected: before 26.1 |
| CVE-2025-43450 | 7.5 | Nov 4 | A logic issue was addressed with improved checks Affected: before 18.7.2; before 26.1 |
| CVE-2025-43436 | 7.5 | Nov 4 | A permissions issue was addressed with additional restrictions Affected: before 26.1 |
| CVE-2025-43496 | 7.5 | Nov 4 | The issue was addressed by adding additional logic Affected: before 18.7.2; before 26.1 |
| CVE-2025-43376 | 7.5 | Nov 4 | A logic issue was addressed with improved state management Affected: before 18.7.7; before 26 |
| CVE-2025-43399 | 7.5 | Nov 4 | This issue was addressed with improved redaction of sensitive information Affected: before 18.7.2 |
| CVE-2025-43462 | 7.5 | Nov 4 | The issue was addressed with improved memory handling Affected: before 26.1 |
| CVE-2025-43454 | 7.5 | Nov 4 | This issue was addressed through improved state management Affected: before 18.7.2; before 26.1 |
| CVE-2025-43449 | 7.5 | Nov 4 | The issue was addressed with improved handling of caches Affected: before 26.1 |
| CVE-2025-43500 | 7.5 | Nov 4 | A privacy issue was addressed with improved handling of user preferences Affected: before 26.1 |
| CVE-2025-43413 | 7.5 | Nov 4 | An access issue was addressed with additional sandbox restrictions Affected: before 26.1 |
| CVE-2025-24224 | 7.5 | Jul 29 | The issue was addressed with improved checks Affected: before 18.5 |
| CVE-2025-43227 | 7.5 | Jul 29 | This issue was addressed through improved state management Affected: before 18.6 |
| CVE-2025-43223 | 7.5 | Jul 29 | A denial-of-service issue was addressed with improved input validation Affected: before 18.6 |
| CVE-2024-54538 | 7.5 | Dec 20 | A denial-of-service issue was addressed with improved input validation Affected: before 17.7.1; before 18.1 |
| CVE-2022-32927 | 7.5 | Nov 1 | The issue was addressed with improved memory handling Affected: before 16.1; before 15.7 |
| CVE-2026-84611 | 7.3 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-84620 | 7.3 | Sep 14 | An integer overflow was addressed with improved input validation Affected: before 26.7; before 27 |
| CVE-2026-64752 | 7.3 | Sep 14 | A memory corruption issue was addressed by removing the vulnerable code Affected: before 27 |
| CVE-2026-84632 | 7.3 | Sep 14 | The issue was addressed with improved memory handling Affected: before 26.7; before 27 |
| CVE-2026-43655 | 7.3 | May 11 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.5 |
| CVE-2026-43656 | 7.3 | May 11 | An out-of-bounds write issue was addressed with improved input validation Affected: before 18.7.9; before 26.5 |
| CVE-2026-64736 | 7.1 | Sep 14 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.6.1 |
| CVE-2026-20683 | 7.1 | Sep 14 | An authentication issue was addressed with improved state management Affected: before 27 |
| CVE-2026-65359 | 7.1 | Sep 14 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-43813 | 7.1 | Jul 27 | A validation issue was addressed with improved input sanitization Affected: before 26.6 |
| CVE-2026-64725 | 7.1 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 18.7.10; before 26.6 |
The 500 most important CVEs for this product (exploited first, then by severity)