IA
Product
iOS and iPadOS
On CISA KEVExploited in the wild
1,364
CVEs
60
On KEV
10.0
Max CVSS
200
New 30D
Severity mix
Critical 90High 374Medium 36Low 0
Watch
Add iOS and iPadOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-43449 | 7.5 | Nov 4 | The issue was addressed with improved handling of caches Affected: before 26.1 |
| CVE-2025-43500 | 7.5 | Nov 4 | A privacy issue was addressed with improved handling of user preferences Affected: before 26.1 |
| CVE-2025-43413 | 7.5 | Nov 4 | An access issue was addressed with additional sandbox restrictions Affected: before 26.1 |
| CVE-2025-24224 | 7.5 | Jul 29 | The issue was addressed with improved checks Affected: before 18.5 |
| CVE-2025-43227 | 7.5 | Jul 29 | This issue was addressed through improved state management Affected: before 18.6 |
| CVE-2025-43223 | 7.5 | Jul 29 | A denial-of-service issue was addressed with improved input validation Affected: before 18.6 |
| CVE-2025-31221 | 7.5 | May 12 | An integer overflow was addressed with improved input validation Affected: before 18.5 |
| CVE-2025-31208 | 7.5 | May 12 | The issue was addressed with improved checks Affected: before 18.5 |
| CVE-2025-30471 | 7.5 | Mar 31 | A validation issue was addressed with improved logic Affected: before 18.4 |
| CVE-2025-24221 | 7.5 | Mar 31 | This issue was addressed with improved data access restriction Affected: before 18.4 |
| CVE-2024-54551 | 7.5 | Mar 20 | The issue was addressed with improved memory handling Affected: before 17.6 |
| CVE-2024-44227 | 7.5 | Mar 10 | The issue was addressed with improved memory handling Affected: before 18 |
| CVE-2025-24177 | 7.5 | Jan 27 | A null pointer dereference was addressed with improved input validation Affected: before 18.3 |
| CVE-2025-24129 | 7.5 | Jan 27 | A type confusion issue was addressed with improved checks Affected: before 18.3 |
| CVE-2024-54538 | 7.5 | Dec 20 | A denial-of-service issue was addressed with improved input validation Affected: before 17.7.1; before 18.1 |
| CVE-2024-54508 | 7.5 | Dec 11 | The issue was addressed with improved memory handling Affected: before 18.2 |
| CVE-2024-54479 | 7.5 | Dec 11 | The issue was addressed with improved checks Affected: before 18.2 |
| CVE-2024-44259 | 7.5 | Oct 28 | This issue was addressed through improved state management Affected: before 17.7.1; before 18.1 |
| CVE-2024-44165 | 7.5 | Sep 16 | A logic issue was addressed with improved checks Affected: before 17.7; before 18 |
| CVE-2024-40856 | 7.5 | Sep 16 | An integrity issue was addressed with Beacon Protection Affected: before 18 |
| CVE-2024-27879 | 7.5 | Sep 16 | The issue was addressed with improved bounds checks Affected: before 17.7; before 18 |
| CVE-2024-27874 | 7.5 | Sep 16 | This issue was addressed through improved state management Affected: before 18 |
| CVE-2024-40815 | 7.5 | Jul 29 | A race condition was addressed with additional validation Affected: before 17.6 |
| CVE-2024-40786 | 7.5 | Jul 29 | This issue was addressed through improved state management Affected: before 16.7.9; before 17.6 |
| CVE-2023-42962 | 7.5 | Mar 28 | This issue was addressed with improved checks This issue is fixed in iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3 Affected: before 17.2; before 16.7 |
| CVE-2024-23203 | 7.5 | Jan 23 | The issue was addressed with additional permissions checks Affected: before 16.7.6; before 17.3 |
| CVE-2024-23204 | 7.5 | Jan 23 | The issue was addressed with additional permissions checks Affected: before 16.7.6; before 17.3 |
| CVE-2023-42869 | 7.5 | Jan 10 | Multiple memory corruption issues were addressed with improved input validation Affected: before 16.5 |
| CVE-2023-40393 | 7.5 | Jan 10 | An authentication issue was addressed with improved state management Affected: before 17 |
| CVE-2022-32927 | 7.5 | Nov 1 | The issue was addressed with improved memory handling Affected: before 16.1; before 15.7 |
| CVE-2026-84611 | 7.3 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-84620 | 7.3 | Sep 14 | An integer overflow was addressed with improved input validation Affected: before 26.7; before 27 |
| CVE-2026-64752 | 7.3 | Sep 14 | A memory corruption issue was addressed by removing the vulnerable code Affected: before 27 |
| CVE-2026-84632 | 7.3 | Sep 14 | The issue was addressed with improved memory handling Affected: before 26.7; before 27 |
| CVE-2026-43655 | 7.3 | May 11 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.5 |
| CVE-2026-43656 | 7.3 | May 11 | An out-of-bounds write issue was addressed with improved input validation Affected: before 18.7.9; before 26.5 |
| CVE-2025-31238 | 7.3 | May 12 | The issue was addressed with improved checks Affected: before 18.5 |
| CVE-2023-42875 | 7.3 | Apr 11 | Processing web content may lead to arbitrary code execution Affected: before 17 |
| CVE-2024-44276 | 7.3 | Mar 17 | This issue was addressed by using HTTPS when sending information over the network Affected: before 18.2 |
| CVE-2025-24126 | 7.3 | Jan 27 | An input validation issue was addressed Affected: before 18.3 |
| CVE-2026-113912 New | 7.1 | Oct 26 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.7; before 27.2 |
| CVE-2026-64736 | 7.1 | Sep 14 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.6.1 |
| CVE-2026-20683 | 7.1 | Sep 14 | An authentication issue was addressed with improved state management Affected: before 27 |
| CVE-2026-65359 | 7.1 | Sep 14 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-43813 | 7.1 | Jul 27 | A validation issue was addressed with improved input sanitization Affected: before 26.6 |
| CVE-2026-64725 | 7.1 | Jul 27 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 18.7.10; before 26.6 |
| CVE-2026-64692 | 7.1 | Jul 27 | An out-of-bounds read was addressed with improved bounds checking Affected: before 18.7.10; before 26.6 |
| CVE-2026-43701 | 7.1 | Jun 29 | The issue was addressed with improved checks Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43725 | 7.1 | Jun 29 | The issue was addressed with improved input validation Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-28941 | 7.1 | May 11 | The issue was addressed with improved checks Affected: before 18.7.9 |
The 500 most important CVEs for this product (exploited first, then by severity)