IO
Operating System
iOS
On CISA KEVExploited in the wildRansomware-linked
4,331
CVEs
93
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 215High 272Medium 13Low 0
Watch
Add iOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-8749 | 9.8 | Oct 27 | Multiple memory corruption issues were addressed with improved input validation Affected: before 13.0 |
| CVE-2019-8746 | 9.8 | Oct 27 | An out-of-bounds read was addressed with improved input validation Affected: before 13.1 |
| CVE-2019-8712 | 9.8 | Oct 27 | A memory corruption issue was addressed with improved memory handling Affected: before 13.1 |
| CVE-2019-8547 | 9.8 | Oct 27 | An out-of-bounds read issue existed that led to the disclosure of kernel memory Affected: before 12.2 |
| CVE-2019-7288 | 9.8 | Oct 27 | The issue was addressed with improved validation on the FaceTime server Affected: before 12.1.4 |
| CVE-2020-9898 | 9.8 | Oct 22 | This issue was addressed with improved entitlements Affected: before 13.6 |
| CVE-2020-9895 | 9.8 | Oct 16 | A use after free issue was addressed with improved memory management Affected: before 13.6 |
| CVE-2020-9850 | 9.8 | Jun 9 | A logic issue was addressed with improved restrictions Affected: before 13.5 |
| CVE-2020-9838 | 9.8 | Jun 9 | An out-of-bounds read was addressed with improved bounds checking Affected: before 13.5 |
| CVE-2019-6203 | 9.8 | Apr 17 | A logic issue was addressed with improved state management Affected: before 12.2 |
| CVE-2020-3911 | 9.8 | Apr 1 | A buffer overflow was addressed with improved bounds checking Affected: before 13.4 |
| CVE-2020-3910 | 9.8 | Apr 1 | A buffer overflow was addressed with improved size validation Affected: before 13.4 |
| CVE-2020-3909 | 9.8 | Apr 1 | A buffer overflow was addressed with improved bounds checking Affected: before 13.4 |
| CVE-2019-8662 | 9.8 | Dec 18 | This issue was addressed with improved checks Affected: before 12.4 |
| CVE-2019-8660 | 9.8 | Dec 18 | A memory corruption issue was addressed with improved input validation Affected: before 12.4 |
| CVE-2019-8648 | 9.8 | Dec 18 | A memory corruption issue was addressed with improved input validation Affected: before 12.4 |
| CVE-2019-8647 | 9.8 | Dec 18 | A use after free issue was addressed with improved memory management Affected: before 12.4 |
| CVE-2019-8641 | 9.8 | Dec 18 | An out-of-bounds read was addressed with improved input validation Affected: before 12.4 |
| CVE-2019-8613 | 9.8 | Dec 18 | A use after free issue was addressed with improved memory management Affected: before 12.3 |
| CVE-2019-8600 | 9.8 | Dec 18 | A memory corruption issue was addressed with improved input validation Affected: before 12.3 |
| CVE-2018-4367 | 9.8 | Apr 3 | A memory corruption issue was addressed with improved input validation Affected: before 12.1 |
| CVE-2018-4332 | 9.8 | Apr 3 | A memory corruption issue was addressed with improved memory handling Affected: before 12.0 |
| CVE-2018-4331 | 9.8 | Apr 3 | A memory corruption issue was addressed with improved memory handling Affected: before 12.0 |
| CVE-2019-6206 | 9.8 | Mar 4 | An issue existed with autofill resuming after it was canceled Affected: before iOS 12.1.3 |
| CVE-2018-4189 | 9.8 | Jan 11 | In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, watchOS before 4.2.2, and tvOS before 11.2.5, a… Affected: before 11.2.5 |
| CVE-2018-4147 | 9.8 | Jan 11 | In iCloud for Windows before 7.3, Safari before 11.0.3, iTunes before 12.7.3 for Windows, and iOS before 11.2.5, multiple memory corruption issues exist and were addressed with… Affected: before 11.2.5 |
| CVE-2018-4298 | 9.8 | Jan 11 | In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management Affected: before 11.2.5 |
| CVE-2018-4148 | 9.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 11.3 |
| CVE-2018-4124 | 9.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 11.2.6 |
| CVE-2018-4115 | 9.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 11.3 |
| CVE-2018-4110 | 9.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 11.3 |
| CVE-2017-7130 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.3.3 |
| CVE-2017-7129 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.3.3 |
| CVE-2017-7128 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.3.3 |
| CVE-2017-7112 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.3.3 |
| CVE-2017-7110 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.3.3 |
| CVE-2017-7108 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.3.3 |
| CVE-2017-7105 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.3.3 |
| CVE-2017-7103 | 9.8 | Oct 23 | An issue was discovered in certain Apple products Affected: through 10.3.3 |
| CVE-2017-11121 | 9.8 | Sep 28 | On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can potentially trigger internal Wi-Fi firmware… Affected: before 11.0 |
| CVE-2017-11120 | 9.8 | Sep 28 | On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the… Affected: before 11.0 |
| CVE-2017-8248 | 9.8 | Aug 16 | A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th generation and later, iPod touch 6th… Affected: through 10.3.2 |
| CVE-2017-7062 | 9.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 10.3.2 |
| CVE-2016-9843 | 9.8 | May 23 | The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation Affected: before 11 |
| CVE-2016-9841 | 9.8 | May 23 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: before 11 |
| CVE-2017-2524 | 9.8 | May 22 | An issue was discovered in certain Apple products Affected: before 10.3.2 |
| CVE-2017-2523 | 9.8 | May 22 | An issue was discovered in certain Apple products Affected: before 10.3.2 |
| CVE-2017-2522 | 9.8 | May 22 | An issue was discovered in certain Apple products Affected: before 10.3.2 |
| CVE-2017-2520 | 9.8 | May 22 | An issue was discovered in certain Apple products Affected: before 10.3.2 |
| CVE-2017-2519 | 9.8 | May 22 | An issue was discovered in certain Apple products Affected: before 10.3.2 |
The 500 most important CVEs for this product (exploited first, then by severity)