IO
Operating System
iOS
On CISA KEVExploited in the wildRansomware-linked
4,329
CVEs
93
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 214High 273Medium 13Low 0
Watch
Add iOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24230 | 9.8 | Mar 31 | An out-of-bounds read issue was addressed with improved input validation Affected: before 17.7.6; 18.0 before 18.4 |
| CVE-2025-24211 | 9.8 | Mar 31 | This issue was addressed with improved memory handling Affected: before 18.4 |
| CVE-2025-24190 | 9.8 | Mar 31 | The issue was addressed with improved memory handling Affected: before 17.7.6; 18.0 before 18.4 |
| CVE-2025-24178 | 9.8 | Mar 31 | This issue was addressed through improved state management Affected: before 17.7.6; 18.0 before 18.4 |
| CVE-2025-24167 | 9.8 | Mar 31 | This issue was addressed through improved state management Affected: before 18.4 |
| CVE-2025-24102 | 9.8 | Jan 27 | The issue was addressed with improved checks Affected: before 17.7.4 |
| CVE-2024-54534 | 9.8 | Dec 12 | The issue was addressed with improved memory handling Affected: before 18.2 |
| CVE-2024-44299 | 9.8 | Dec 12 | The issue was addressed with improved bounds checks Affected: before 18.1 |
| CVE-2024-44242 | 9.8 | Dec 12 | The issue was addressed with improved bounds checks Affected: before 18.1 |
| CVE-2024-44241 | 9.8 | Dec 12 | The issue was addressed with improved bounds checks Affected: before 18.1 |
| CVE-2023-40414 | 9.8 | Jan 10 | A use-after-free issue was addressed with improved memory management Affected: before 17.0 |
| CVE-2023-40400 | 9.8 | Sep 27 | This issue was addressed with improved checks Affected: before 16.6 |
| CVE-2023-38604 | 9.8 | Jul 28 | An out-of-bounds write issue was addressed with improved input validation Affected: before 15.7.8; 16.0 before 16.6 |
| CVE-2023-38598 | 9.8 | Jul 28 | A use-after-free issue was addressed with improved memory management Affected: before 15.7.8; 16.0 before 16.6 |
| CVE-2023-37285 | 9.8 | Jul 28 | An out-of-bounds read was addressed with improved bounds checking Affected: before 15.7.8 |
| CVE-2023-36495 | 9.8 | Jul 28 | An integer overflow was addressed with improved input validation Affected: before 15.7.8; 16.0 before 16.6 |
| CVE-2023-34425 | 9.8 | Jul 28 | The issue was addressed with improved memory handling Affected: before 15.7.8; 16.0 before 16.6 |
| CVE-2023-32419 | 9.8 | Jun 23 | The issue was addressed with improved bounds checks Affected: before 16.5 |
| CVE-2023-32412 | 9.8 | Jun 23 | A use-after-free issue was addressed with improved memory management Affected: before 15.7.6; 16.0 before 16.5 |
| CVE-2023-28201 | 9.8 | May 8 | This issue was addressed with improved state management Affected: before 15.7.4; 16.0 before 16.4 |
| CVE-2023-23526 | 9.8 | May 8 | This was addressed with additional checks by Gatekeeper on files downloaded from an iCloud shared-by-me folder Affected: before 16.4 |
| CVE-2022-46709 | 9.8 | Apr 10 | A memory corruption issue was addressed with improved state management Affected: before 16.0 |
| CVE-2022-26760 | 9.8 | Feb 27 | A memory corruption issue was addressed with improved state management Affected: before 15.5 |
| CVE-2022-42842 | 9.8 | Dec 15 | The issue was addressed with improved memory handling Affected: before 16.2 |
| CVE-2022-42837 | 9.8 | Dec 15 | An issue existed in the parsing of URLs Affected: 15.0 before 15.7.2; 16.0 before 16.2 |
| CVE-2022-42813 | 9.8 | Nov 1 | A certificate validation issue existed in the handling of WKWebView Affected: before 16.1 |
| CVE-2022-32941 | 9.8 | Nov 1 | The issue was addressed with improved bounds checks Affected: before 15.7.1; 16.0 |
| CVE-2022-42808 | 9.8 | Nov 1 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 16.1 |
| CVE-2022-32788 | 9.8 | Sep 20 | A buffer overflow was addressed with improved bounds checking Affected: before 15.6 |
| CVE-2022-32839 | 9.8 | Aug 24 | The issue was addressed with improved bounds checks Affected: before 15.6 |
| CVE-2022-37434 | 9.8 | Aug 5 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field Affected: before 15.7.1; 16.0 before 16.1 |
| CVE-2022-26711 | 9.8 | May 26 | An integer overflow issue was addressed with improved input validation Affected: before 15.5 |
| CVE-2022-22642 | 9.8 | Mar 18 | This issue was addressed with improved checks Affected: before 15.4 |
| CVE-2022-22641 | 9.8 | Mar 18 | A use after free issue was addressed with improved memory management Affected: before 15.4 |
| CVE-2022-22635 | 9.8 | Mar 18 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 15.4 |
| CVE-2022-22632 | 9.8 | Mar 18 | A logic issue was addressed with improved state management Affected: before 15.4 |
| CVE-2019-8703 | 9.8 | Dec 23 | This issue was addressed with improved entitlements Affected: before 13.0 |
| CVE-2021-30820 | 9.8 | Oct 19 | A logic issue was addressed with improved state management Affected: before 14.8 |
| CVE-2021-1882 | 9.8 | Sep 8 | A memory corruption issue was addressed with improved validation Affected: before 14.5 |
| CVE-2021-1864 | 9.8 | Sep 8 | A use after free issue was addressed with improved memory management Affected: before 14.5 |
| CVE-2021-1770 | 9.8 | Sep 8 | A buffer overflow may result in arbitrary code execution Affected: before 14.5 |
| CVE-2021-31009 | 9.8 | Aug 24 | Multiple issues were addressed by removing HDF5 Affected: before 15.2 |
| CVE-2020-36329 | 9.8 | May 21 | A flaw was found in libwebp in versions before 1.0.1 Affected: before 14.7 |
| CVE-2020-36328 | 9.8 | May 21 | A flaw was found in libwebp in versions before 1.0.1 Affected: 14.7 |
| CVE-2021-1818 | 9.8 | Apr 2 | A logic issue was addressed with improved state management Affected: before 14.4 |
| CVE-2021-1796 | 9.8 | Apr 2 | An out-of-bounds write was addressed with improved input validation Affected: before 14.4 |
| CVE-2021-1795 | 9.8 | Apr 2 | An out-of-bounds write was addressed with improved input validation Affected: before 14.4 |
| CVE-2021-1794 | 9.8 | Apr 2 | An out-of-bounds read was addressed with improved input validation Affected: before 14.4 |
| CVE-2019-8531 | 9.8 | Oct 27 | A validation issue existed in Trust Anchor Management Affected: before 12.2 |
| CVE-2019-8749 | 9.8 | Oct 27 | Multiple memory corruption issues were addressed with improved input validation Affected: before 13.0 |
The 500 most important CVEs for this product (exploited first, then by severity)