IA
Product
iOS and iPadOS
On CISA KEVExploited in the wild
744
CVEs
60
On KEV
10.0
Max CVSS
201
New 30D
Severity mix
Critical 50High 203Medium 247Low 0
Watch
Add iOS and iPadOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-84622 | 6.2 | Sep 14 | A memory initialization issue was addressed with improved memory handling Affected: before 26.7; before 27 |
| CVE-2026-84531 | 6.2 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-43653 | 6.2 | May 11 | The issue was addressed with improved memory handling Affected: before 18.7.9; before 26.5 |
| CVE-2026-28977 | 6.2 | May 11 | The issue was addressed with improved bounds checks Affected: before 18.7.9; before 26.5 |
| CVE-2026-28985 | 6.2 | May 11 | A null pointer dereference was addressed with improved input validation Affected: before 26.5 |
| CVE-2026-28897 | 6.2 | May 11 | A buffer overflow was addressed with improved input validation Affected: before 18.7.9; before 26.5 |
| CVE-2026-43666 | 6.2 | May 11 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 18.7.9; before 26.5 |
| CVE-2026-28950 | 6.2 | Apr 22 | A logging issue was addressed with improved data redaction Affected: before 15.8.8; before 16.7.16; before 18.7.8; before 26.4.2 |
| CVE-2026-28833 | 6.2 | Mar 25 | A permissions issue was addressed with additional restrictions Affected: before 26.4 |
| CVE-2026-28822 | 6.2 | Mar 25 | A type confusion issue was addressed with improved memory handling Affected: before 26.4 |
| CVE-2026-20637 | 6.2 | Mar 25 | A use after free issue was addressed with improved memory management Affected: before 18.7.7; before 26.3 |
| CVE-2026-28866 | 6.2 | Mar 25 | This issue was addressed with improved validation of symlinks Affected: before 18.7.7; before 26.4 |
| CVE-2026-28867 | 6.2 | Mar 25 | This issue was addressed with improved authentication Affected: before 18.7.7; before 26.4 |
| CVE-2026-113907 New | 6.1 | Oct 26 | A buffer overflow issue was addressed with improved memory handling Affected: before 26.7.2; before 27.2 |
| CVE-2026-84560 | 6.1 | Sep 14 | An authorization issue was addressed with improved state management Affected: before 27 |
| CVE-2026-86963 | 5.9 | Oct 20 | A denial-of-service issue was addressed with improved input validation Affected: before 26.7; before 27 |
| CVE-2026-65329 | 5.9 | Aug 17 | An authentication issue was addressed with improved state management Affected: before 26.6.1; before 27 |
| CVE-2026-28886 | 5.9 | Mar 25 | A null pointer dereference was addressed with improved input validation Affected: before 18.7.7; before 26.4 |
| CVE-2025-46301 | 5.7 | Feb 11 | The issue was addressed with improved bounds checks Affected: before 18.7.5; before 26.2 |
| CVE-2025-46300 | 5.7 | Feb 11 | The issue was addressed with improved bounds checks Affected: before 18.7.5; before 26.2 |
| CVE-2025-46303 | 5.7 | Feb 11 | The issue was addressed with improved bounds checks Affected: before 18.7.5; before 26.2 |
| CVE-2025-46302 | 5.7 | Feb 11 | The issue was addressed with improved bounds checks Affected: before 18.7.5; before 26.2 |
| CVE-2025-46305 | 5.7 | Feb 11 | The issue was addressed with improved bounds checks Affected: before 18.7.5; before 26.2 |
| CVE-2025-46304 | 5.7 | Feb 11 | The issue was addressed with improved bounds checks Affected: before 18.7.5; before 26.2 |
| CVE-2026-86976 | 5.5 | Oct 20 | An authorization issue was addressed with improved state management Affected: before 27 |
| CVE-2026-86962 | 5.5 | Oct 20 | A double free issue was addressed with improved memory management Affected: before 26.7; before 27 |
| CVE-2026-86955 | 5.5 | Oct 20 | An authorization issue was addressed with improved state management Affected: before 27 |
| CVE-2026-84508 | 5.5 | Oct 20 | This issue was addressed with improved validation of the caller's access Affected: before 27 |
| CVE-2026-65409 | 5.5 | Sep 14 | A type confusion issue was addressed with improved memory handling Affected: before 26.7; before 27 |
| CVE-2026-84534 | 5.5 | Sep 14 | A path handling issue was addressed with improved validation Affected: before 26.7; before 27 |
| CVE-2026-86883 | 5.5 | Sep 14 | A privacy issue was addressed with improved handling of files Affected: before 27 |
| CVE-2026-64756 | 5.5 | Sep 14 | A path handling issue was addressed with improved validation Affected: before 27 |
| CVE-2026-65405 | 5.5 | Sep 14 | A memory initialization issue was addressed with improved memory handling Affected: before 26.7; before 27 |
| CVE-2026-86905 | 5.5 | Sep 14 | This issue was addressed by removing the vulnerable code Affected: before 27 |
| CVE-2026-43664 | 5.5 | Sep 14 | This issue was addressed with improved data protection Affected: before 26.7; before 27 |
| CVE-2026-43808 | 5.5 | Sep 14 | A use-after-free issue was addressed with improved memory management Affected: before 26.6 |
| CVE-2026-43737 | 5.5 | Sep 14 | An authorization issue was addressed with improved validation Affected: before 26.7; before 27 |
| CVE-2026-65404 | 5.5 | Sep 14 | An authorization issue was addressed with improved state management Affected: before 18.7.10; before 27 |
| CVE-2026-84489 | 5.5 | Sep 14 | A buffer overflow was addressed with improved bounds checking Affected: before 18.7.10; before 27 |
| CVE-2026-84523 | 5.5 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-65408 | 5.5 | Sep 14 | An integer overflow was addressed with improved input validation Affected: before 26.7; before 27 |
| CVE-2026-86924 | 5.5 | Sep 14 | A memory corruption issue was addressed with improved input validation Affected: before 26.7; before 27 |
| CVE-2026-65403 | 5.5 | Sep 14 | This issue was addressed with improved checks Affected: before 26.7; before 27 |
| CVE-2026-84617 | 5.5 | Sep 14 | An authorization issue was addressed with improved state management Affected: before 26.7; before 27 |
| CVE-2026-86903 | 5.5 | Sep 14 | An out-of-bounds read was addressed with improved input validation Affected: before 27 |
| CVE-2026-84621 | 5.5 | Sep 14 | An authorization issue was addressed with improved access control Affected: before 26.7; before 27 |
| CVE-2026-43785 | 5.5 | Sep 14 | A permissions issue was addressed with additional restrictions Affected: before 27 |
| CVE-2026-84636 | 5.5 | Sep 14 | An authorization issue was addressed with improved state management Affected: before 27 |
| CVE-2026-65377 | 5.5 | Sep 14 | A memory corruption issue was addressed with improved memory handling Affected: before 26.7; before 27 |
| CVE-2026-84616 | 5.5 | Sep 14 | A type confusion issue was addressed with improved memory handling Affected: before 26.7; before 27 |
The 500 most important CVEs for this product (exploited first, then by severity)