IO
Operating System
iOS
On CISA KEVExploited in the wildRansomware-linked
4,329
CVEs
93
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 214High 273Medium 13Low 0
Watch
Add iOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-41990 In wildKEV | 7.8 | Sep 11 | Apple Multiple Products Code Execution Vulnerability Affected: before 15.7.8; 16.0 before 16.3 |
| CVE-2023-41064 In wildKEV | 7.8 | Sep 7 | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability Affected: before 15.7.9; 16.0 before 16.6.1 |
| CVE-2023-41061 In wildKEV | 7.8 | Sep 7 | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability Affected: before 16.6.1 |
| CVE-2023-32434 In wildKEV | 7.8 | Jun 23 | Apple Multiple Products Integer Overflow Vulnerability Affected: before 15.7.7; 16.0 before 16.5.1 |
| CVE-2022-42827 In wildKEV | 7.8 | Nov 1 | Apple iOS and iPadOS Out-of-Bounds Write Vulnerability Affected: before 15.7.1; 16.0 before 16.1 |
| CVE-2022-32917 In wildKEV | 7.8 | Sep 20 | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability Affected: before 16 |
| CVE-2022-32894 In wildKEV | 7.8 | Aug 24 | Apple iOS and macOS Out-of-Bounds Write Vulnerability Affected: before 15.6.1 |
| CVE-2022-22675 In wildKEV | 7.8 | May 26 | Apple macOS Out-of-Bounds Write Vulnerability Affected: before 15.4.1 |
| CVE-2021-30807 In wildKEV | 7.8 | Oct 19 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 14.7.1 |
| CVE-2021-30983 In wildKEV | 7.8 | Aug 24 | Apple iOS and iPadOS Buffer Overflow Vulnerability Affected: before 15.2 |
| CVE-2021-30952 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow or Wraparound Vulnerability Affected: before 15.2 |
| CVE-2021-30900 In wildKEV | 7.8 | Aug 24 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Affected: before 14.8.1; 15.0 |
| CVE-2021-30883 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 14.8.1; 15.0 before 15.0.2 |
| CVE-2021-30869 In wildKEV | 7.8 | Aug 24 | Apple iOS, iPadOS, and macOS Type Confusion Vulnerability Affected: before 14.4 |
| CVE-2021-30860 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow Vulnerability Affected: before 14.8 |
| CVE-2020-27930 In wildKEV | 7.8 | Dec 8 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 14.2 |
| CVE-2020-27932 In wildKEV | 7.8 | Dec 8 | Apple Multiple Products Type Confusion Vulnerability Affected: before 12.4.9; 14.0 before 14.2 |
| CVE-2020-9907 In wildKEV | 7.8 | Oct 16 | Apple Multiple Products Memory Corruption Vulnerability Affected: before iOS 13.6 and iPadOS 13.6 |
| CVE-2020-9859 In wildKEV | 7.8 | Jun 5 | Apple Multiple Products Code Execution Vulnerability Affected: before iOS 13.5.1 and iPadOS 13.5.1 |
| CVE-2020-3837 In wildKEV | 7.8 | Feb 27 | Apple Multiple Products Memory Corruption Vulnerability Affected: before iOS 13.3.1 and iPadOS 13.3.1 |
| CVE-2019-8605 In wildKEV | 7.8 | Dec 18 | Apple Multiple Products Use-After-Free Vulnerability Affected: before iOS 12.3 |
| CVE-2019-7286 In wildKEV | 7.8 | Dec 18 | Apple Multiple Products Memory Corruption Vulnerability Affected: before iOS 12.1.4 |
| CVE-2019-7287 In wildKEV | 7.8 | Dec 18 | Apple iOS Memory Corruption Vulnerability Affected: before iOS 12.1.4 |
| CVE-2018-4344 In wildKEV | 7.8 | Apr 3 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 12.0 |
| CVE-2016-4656 In wildKEV | 7.8 | Aug 25 | Apple iOS Memory Corruption Vulnerability Affected: before 9.3.5 |
| CVE-2014-4404 In wildKEV | 7.8 | Sep 18 | Apple OS X Heap-Based Buffer Overflow Vulnerability Affected: before 8.0 |
| CVE-2021-31010 In wildKEV | 7.5 | Aug 24 | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability Affected: before 14.8 |
| CVE-2019-6223 In wildKEV | 7.5 | Mar 5 | Apple iOS and macOS Group Facetime Vulnerability Affected: before iOS 12.1.3 |
| CVE-2022-48618 In wildKEV | 7.0 | Jan 9 | Apple Multiple Products Memory Corruption Vulnerability Affected: before 16.2 |
| CVE-2021-1782 In wildKEV | 7.0 | Apr 2 | Apple Multiple Products Race Condition Vulnerability Affected: before 14.4 |
| CVE-2023-42916 In wildKEV | 6.5 | Nov 30 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Affected: before 15.8.1; 16.0 before 16.7.3; 17.0 before 17.1.2 |
| CVE-2023-28204 In wildKEV | 6.5 | Jun 23 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Affected: before 15.7.6; 16.0 before 16.5 |
| CVE-2024-44309 In wildKEV | 6.3 | Nov 19 | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Affected: before 17.7.2; 18.0 before 18.1.1 |
| CVE-2025-24200 In wildKEV | 6.1 | Feb 10 | Apple iOS and iPadOS Incorrect Authorization Vulnerability Affected: before 17.7.5 |
| CVE-2021-1879 In wildKEV | 6.1 | Apr 2 | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability Affected: before 12.5 |
| CVE-2025-43520 In wildKEV | 5.5 | Dec 12 | Apple Multiple Products Classic Buffer Overflow Vulnerability Affected: before 18.7.2; 26.0 |
| CVE-2023-41991 In wildKEV | 5.5 | Sep 21 | Apple Multiple Products Improper Certificate Validation Vulnerability Affected: before 16.7; 17.0 |
| CVE-2023-38606 In wildKEV | 5.5 | Jul 26 | Apple Multiple Products Kernel Unspecified Vulnerability Affected: before 15.7.8; 16.0 before 16.6 |
| CVE-2020-27950 In wildKEV | 5.5 | Dec 8 | Apple Multiple Products Memory Initialization Vulnerability Affected: before 12.4.9; 14.0 before 14.2 |
| CVE-2020-9934 In wildKEV | 5.5 | Oct 16 | Apple iOS, iPadOS, and macOS Input Validation Vulnerability Affected: before iOS 13.6 and iPadOS 13.6 |
| CVE-2016-4655 In wildKEV | 5.5 | Aug 25 | Apple iOS Information Disclosure Vulnerability Affected: before 9.3.5; 10.0 |
| CVE-2020-9819 In wildKEV | 4.3 | Jun 9 | Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability Affected: before iOS 13.5 and iPadOS 13.5 |
| CVE-2025-43200 In wildKEV | 4.2 | Jun 16 | Apple Multiple Products Unspecified Vulnerability Affected: before 17.7.5 |
| CVE-2022-32845 | 10.0 | Sep 23 | This issue was addressed with improved checks Affected: before 15.6 |
| CVE-2019-8779 | 10.0 | Dec 18 | A logic issue applied the incorrect restrictions Affected: before 13.1.1 |
| CVE-2018-4310 | 10.0 | Apr 3 | An access issue was addressed with additional sandbox restrictions Affected: before 12.0 |
| CVE-2019-6235 | 10.0 | Mar 4 | A memory corruption issue was addressed with improved validation Affected: before iOS 12.1.3 |
| CVE-2015-8659 | 10.0 | Jan 12 | The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug Affected: through 9.2.1 |
| CVE-2026-65414 | 9.8 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.7 |
| CVE-2026-84609 | 9.8 | Sep 14 | A permissions issue was addressed with improved path validation Affected: before 27.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
