Apple iOS vulnerabilities
1,765 known vulnerabilities affecting apple/ios.
Total CVEs
1,765
CISA KEV
27
actively exploited
Public exploits
229
Exploited in wild
44
Severity breakdown
CRITICAL119HIGH907MEDIUM638LOW94UNKNOWN7
Vulnerabilities
Page 23 of 89
CVE-2019-8559P3HIGHCVSS 8.8≥ unspecified, < iOS 12.22019-12-18
CVE-2019-8559 [HIGH] CWE-787 CVE-2019-8559: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8556P3HIGHCVSS 8.8≥ unspecified, < iOS 12.22019-12-18
CVE-2019-8556 [HIGH] CWE-416 CVE-2019-8556: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-25071P3HIGHCVSS 8.8v12.4.0v12.4.12022-06-25
CVE-2019-25071 [HIGH] CWE-269 CVE-2019-25071: A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected b
A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to execute commands remotely. Exploit details have been disclosed to the public. The existence and implications of thi
nvd
CVE-2020-3825P3HIGHCVSS 8.8≥ unspecified, < iOS 13.3.1 and iPadOS 13.3.12020-02-27
CVE-2020-3825 [HIGH] CWE-787 CVE-2020-3825: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2017-13849P4MEDIUMCVSS 5.5PoCv11.12017-10-31
CVE-2017-13849 [MEDIUM] CVE-2017-13849: iOS 11.1
Apple Security Update: About the security content of iOS 11.1
Product: iOS
Version: 11.1
CVE: CVE-2017-13849
Component: CoreText
Impact: Processing a maliciously crafted text file may lead to an unexpected application termination
Description: A denial of service issue was addressed through improved memory handling.
apple
CVE-2016-4734P3CRITICALCVSS 9.6v102016-09-13
CVE-2016-4734 [CRITICAL] CVE-2016-4734: iOS 10
Apple Security Update: About the security content of iOS 10
Product: iOS
Version: 10
CVE: CVE-2016-4734
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved memory handling.
apple
CVE-2017-10989P3CRITICALCVSS 9.8v112017-09-19
CVE-2017-10989 [CRITICAL] CVE-2017-10989: iOS 11
Apple Security Update: About the security content of iOS 11
Product: iOS
Version: 11
CVE: CVE-2017-10989
Component: SQLite
Impact: Multiple issues in SQLite
Description: Multiple issues were addressed by updating to version 3.19.3.
apple
CVE-2016-1727P3HIGHCVSS 8.8v9.2.1
CVE-2016-1727 [HIGH] CVE-2016-1727: iOS 9.2.1
Apple Security Update: About the security content of iOS 9.2.1
Product: iOS
Version: 9.2.1
CVE: CVE-2016-1727
Component: CVE-ID
apple
CVE-2016-4738P3HIGHCVSS 8.8v102016-09-13
CVE-2016-4738 [HIGH] CVE-2016-4738: iOS 10
Apple Security Update: About the security content of iOS 10
Product: iOS
Version: 10
CVE: CVE-2016-4738
Component: Keyboards
Impact: Keyboard auto correct suggestions may reveal sensitive information
Description: The iOS keyboard was inadvertently caching sensitive information. This issue was addressed through improved heuristics.
apple
CVE-2016-1783P3HIGHCVSS 8.8v9.3
CVE-2016-1783 [HIGH] CVE-2016-1783: iOS 9.3
Apple Security Update: About the security content of iOS 9.3
Product: iOS
Version: 9.3
CVE: CVE-2016-1783
Component: CVE-ID
apple
CVE-2017-7000P3HIGHCVSS 8.8v10.3.22017-05-15
CVE-2017-7000 [HIGH] CVE-2017-7000: iOS 10.3.2
Apple Security Update: About the security content of iOS 10.3.2
Product: iOS
Version: 10.3.2
CVE: CVE-2017-7000
Component: SQLite
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved input validation.
apple
CVE-2017-15412P3HIGHCVSS 8.8v11.32018-03-29
CVE-2017-15412 [HIGH] CVE-2017-15412: iOS 11.3
Apple Security Update: About the security content of iOS 11.3
Product: iOS
Version: 11.3
CVE: CVE-2017-15412
Component: Kernel
Impact: A malicious application may be able to determine kernel memory layout
Description: An information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling.
apple
CVE-2017-7160P3HIGHCVSS 8.8v11.22017-12-02
CVE-2017-7160 [HIGH] CVE-2017-7160: iOS 11.2
Apple Security Update: About the security content of iOS 11.2
Product: iOS
Version: 11.2
CVE: CVE-2017-7160
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.
apple
CVE-2017-13885P3HIGHCVSS 8.8v11.22017-12-02
CVE-2017-13885 [HIGH] CVE-2017-13885: iOS 11.2
Apple Security Update: About the security content of iOS 11.2
Product: iOS
Version: 11.2
CVE: CVE-2017-13885
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.
apple
CVE-2017-7068P3HIGHCVSS 8.8v10.3.32017-07-19
CVE-2017-7068 [HIGH] CVE-2017-7068: iOS 10.3.3
Apple Security Update: About the security content of iOS 10.3.3
Product: iOS
Version: 10.3.3
CVE: CVE-2017-7068
Component: Kernel
Impact: An application may be able to read restricted memory
Description: A validation issue was addressed with improved input sanitization.
apple
CVE-2017-7157P3HIGHCVSS 8.8v11.22017-12-02
CVE-2017-7157 [HIGH] CVE-2017-7157: iOS 11.2
Apple Security Update: About the security content of iOS 11.2
Product: iOS
Version: 11.2
CVE: CVE-2017-7157
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.
apple
CVE-2017-13866P3HIGHCVSS 8.8v11.22017-12-02
CVE-2017-13866 [HIGH] CVE-2017-13866: iOS 11.2
Apple Security Update: About the security content of iOS 11.2
Product: iOS
Version: 11.2
CVE: CVE-2017-13866
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.
apple
CVE-2017-7156P3HIGHCVSS 8.8v11.22017-12-02
CVE-2017-7156 [HIGH] CVE-2017-7156: iOS 11.2
Apple Security Update: About the security content of iOS 11.2
Product: iOS
Version: 11.2
CVE: CVE-2017-7156
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.
apple
CVE-2017-13870P3HIGHCVSS 8.8v11.22017-12-02
CVE-2017-13870 [HIGH] CVE-2017-13870: iOS 11.2
Apple Security Update: About the security content of iOS 11.2
Product: iOS
Version: 11.2
CVE: CVE-2017-13870
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.
apple
CVE-2017-13856P3HIGHCVSS 8.8v11.22017-12-02
CVE-2017-13856 [HIGH] CVE-2017-13856: iOS 11.2
Apple Security Update: About the security content of iOS 11.2
Product: iOS
Version: 11.2
CVE: CVE-2017-13856
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.
apple