IO
Operating System
iOS
On CISA KEVExploited in the wildRansomware-linked
4,329
CVEs
93
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 214High 273Medium 13Low 0
Watch
Add iOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24154 | 9.1 | Jan 27 | An out-of-bounds write was addressed with improved input validation Affected: before 18.3 |
| CVE-2024-54542 | 9.1 | Jan 27 | An authentication issue was addressed with improved state management Affected: before 18.2 |
| CVE-2024-54530 | 9.1 | Jan 27 | The issue was addressed with improved checks Affected: before 18.2 |
| CVE-2024-54512 | 9.1 | Jan 27 | The issue was addressed by removing the relevant flags Affected: before 18.2 |
| CVE-2024-44217 | 9.1 | Oct 28 | A permissions issue was addressed by removing vulnerable code and adding additional checks Affected: before 18.0 |
| CVE-2022-32847 | 9.1 | Sep 23 | This issue was addressed with improved checks Affected: before 15.6 |
| CVE-2021-30925 | 9.1 | Aug 24 | The issue was addressed with improved permissions logic Affected: before 15.0 |
| CVE-2020-36331 | 9.1 | May 21 | A flaw was found in libwebp in versions before 1.0.1 Affected: before 14.7 |
| CVE-2020-36330 | 9.1 | May 21 | A flaw was found in libwebp in versions before 1.0.1 Affected: before 14.7 |
| CVE-2020-9920 | 9.1 | Oct 22 | A path handling issue was addressed with improved validation Affected: before 13.6 |
| CVE-2020-9906 | 9.1 | Oct 22 | A memory corruption issue was addressed with improved input validation Affected: before 13.6 |
| CVE-2020-9868 | 9.1 | Oct 22 | A certificate validation issue existed when processing administrator added certificates Affected: before 13.6 |
| CVE-2019-8527 | 9.1 | Dec 18 | A buffer overflow was addressed with improved size validation Affected: before 12.2 |
| CVE-2026-20677 | 9.0 | Feb 11 | A race condition was addressed with improved handling of symbolic links Affected: before 18.7.5; 26.0 before 26.3 |
The 500 most important CVEs for this product (exploited first, then by severity)