IA
Product
iOS and iPadOS
On CISA KEVExploited in the wild
753
CVEs
60
On KEV
10.0
Max CVSS
201
New 30D
Severity mix
Critical 50High 204Medium 246Low 0
Watch
Add iOS and iPadOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-64728 | 6.5 | Jul 27 | A permissions issue was addressed with improved validation Affected: before 26.6 |
| CVE-2026-64735 | 6.5 | Jul 27 | An inconsistent user interface issue was addressed with improved state management Affected: before 18.7.10; before 26.6 |
| CVE-2026-64742 | 6.5 | Jul 27 | This issue was addressed by using HTTPS when sending information over the network Affected: before 18.7.10; before 26.6 |
| CVE-2026-64743 | 6.5 | Jul 27 | An authorization issue was addressed with improved state management Affected: before 18.7.10; before 26.6 |
| CVE-2026-43700 | 6.5 | Jun 29 | A cross-origin issue was addressed with improved tracking of security origins Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43716 | 6.5 | Jun 29 | The issue was addressed with improved memory handling Affected: before 26.5.2 |
| CVE-2026-43720 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43721 | 6.5 | Jun 29 | This issue was addressed through improved state management Affected: before 26.5.2 |
| CVE-2026-39872 | 6.5 | Jun 29 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43717 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43740 | 6.5 | Jun 29 | The issue was addressed with improved memory handling Affected: before 26.5.2 |
| CVE-2026-43663 | 6.5 | Jun 29 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43726 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43706 | 6.5 | Jun 29 | A double free issue was addressed with improved memory management Affected: before 26.5.2 |
| CVE-2026-43746 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43707 | 6.5 | Jun 29 | A memory corruption issue was addressed with improved memory handling Affected: before 26.5.2 |
| CVE-2026-43727 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43732 | 6.5 | Jun 29 | A path handling issue was addressed with improved validation Affected: before 26.5.2 |
| CVE-2026-43712 | 6.5 | Jun 29 | The issue was addressed with improved memory handling Affected: before 26.5.2 |
| CVE-2026-43745 | 6.5 | Jun 29 | An out-of-bounds write issue was addressed with improved input validation Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43713 | 6.5 | Jun 29 | A permissions issue was addressed with additional restrictions Affected: before 26.5.2 |
| CVE-2026-43709 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 26.5.2 |
| CVE-2026-43699 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43676 | 6.5 | Jun 29 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43734 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43718 | 6.5 | Jun 29 | A stack overflow was addressed with improved input validation Affected: before 26.5.2 |
| CVE-2026-28979 | 6.5 | Jun 29 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43703 | 6.5 | Jun 29 | The issue was addressed with improved memory handling Affected: before 26.5.2 |
| CVE-2026-43742 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-28956 | 6.5 | May 11 | A memory corruption issue was addressed with improved input validation Affected: before 26.5 |
| CVE-2026-28920 | 6.5 | May 11 | An information leakage was addressed with additional validation Affected: before 18.7.9; before 26.5 |
| CVE-2026-28972 | 6.5 | May 11 | An out-of-bounds write issue was addressed with improved input validation Affected: before 18.7.9; before 26.5 |
| CVE-2026-28903 | 6.5 | May 11 | The issue was addressed with improved memory handling Affected: before 18.7.9; before 26.5 |
| CVE-2026-28942 | 6.5 | May 11 | A use-after-free issue was addressed with improved memory management Affected: before 26.5 |
| CVE-2026-28902 | 6.5 | May 11 | The issue was addressed with improved memory handling Affected: before 26.5 |
| CVE-2026-28918 | 6.5 | May 11 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.5 |
| CVE-2026-20665 | 6.5 | Mar 25 | This issue was addressed through improved state management Affected: before 18.7.7; before 26.4 |
| CVE-2026-20690 | 6.5 | Mar 25 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 18.7.7; before 26.4 |
| CVE-2026-28878 | 6.5 | Mar 25 | A privacy issue was addressed by removing sensitive data Affected: before 18.7.7; before 26.4 |
| CVE-2026-28863 | 6.5 | Mar 25 | A permissions issue was addressed with additional restrictions Affected: before 26.4 |
| CVE-2026-28879 | 6.5 | Mar 25 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.7; before 26.4 |
| CVE-2026-28880 | 6.5 | Mar 25 | A permissions issue was addressed with additional restrictions Affected: before 18.7.7; before 26.4 |
| CVE-2026-20657 | 6.5 | Mar 25 | A buffer overflow issue was addressed with improved memory handling Affected: before 18.7.7; before 26.4 |
| CVE-2026-28857 | 6.5 | Mar 25 | The issue was addressed with improved memory handling Affected: before 26.4 |
| CVE-2026-20644 | 6.5 | Feb 11 | The issue was addressed with improved memory handling Affected: before 18.7.5; before 26.3 |
| CVE-2026-20680 | 6.5 | Feb 11 | The issue was addressed with additional restrictions on the observability of app states Affected: before 18.7.5; before 26.3 |
| CVE-2026-20636 | 6.5 | Feb 11 | The issue was addressed with improved memory handling Affected: before 26.3 |
| CVE-2025-46298 | 6.5 | Jan 9 | The issue was addressed with improved memory handling Affected: before 26.2 |
| CVE-2022-42817 | 6.5 | Nov 1 | A logic issue was addressed with improved state management Affected: before 16.1; before 15.7 |
| CVE-2026-64717 | 6.3 | Sep 14 | A race condition was addressed with improved state handling Affected: before 18.7.10; before 26.6 |
The 500 most important CVEs for this product (exploited first, then by severity)