Apple iOS vulnerabilities
1,765 known vulnerabilities affecting apple/ios.
Total CVEs
1,765
CISA KEV
27
actively exploited
Public exploits
229
Exploited in wild
44
Severity breakdown
CRITICAL119HIGH907MEDIUM638LOW94UNKNOWN7
Vulnerabilities
Page 28 of 89
CVE-2017-7081P3HIGHCVSS 8.8v112017-09-19
CVE-2017-7081 [HIGH] CVE-2017-7081: iOS 11
Apple Security Update: About the security content of iOS 11
Product: iOS
Version: 11
CVE: CVE-2017-7081
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A memory corruption issue was addressed through improved input validation.
apple
CVE-2016-4764P3HIGHCVSS 8.8v102016-09-13
CVE-2016-4764 [HIGH] CVE-2016-4764: iOS 10
Apple Security Update: About the security content of iOS 10
Product: iOS
Version: 10
CVE: CVE-2016-4764
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved state management.
apple
CVE-2016-7578P3HIGHCVSS 8.8v10.12016-10-24
CVE-2016-7578 [HIGH] CVE-2016-7578: iOS 10.1
Apple Security Update: About the security content of iOS 10.1
Product: iOS
Version: 10.1
CVE: CVE-2016-7578
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved memory handling.
apple
CVE-2017-13793P3HIGHCVSS 8.8v11.12017-10-31
CVE-2017-13793 [HIGH] CVE-2017-13793: iOS 11.1
Apple Security Update: About the security content of iOS 11.1
Product: iOS
Version: 11.1
CVE: CVE-2017-13793
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.
apple
CVE-2017-13788P3HIGHCVSS 8.8v11.12017-10-31
CVE-2017-13788 [HIGH] CVE-2017-13788: iOS 11.1
Apple Security Update: About the security content of iOS 11.1
Product: iOS
Version: 11.1
CVE: CVE-2017-13788
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.
apple
CVE-2017-13803P3HIGHCVSS 8.8v11.12017-10-31
CVE-2017-13803 [HIGH] CVE-2017-13803: iOS 11.1
Apple Security Update: About the security content of iOS 11.1
Product: iOS
Version: 11.1
CVE: CVE-2017-13803
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.
apple
CVE-2020-9783P3HIGHCVSS 8.8≥ unspecified, < iOS 13.4 and iPadOS 13.42020-04-01
CVE-2020-9783 [HIGH] CWE-416 CVE-2020-9783: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to code execution.
nvd
CVE-2019-9506P3HIGHCVSS 8.1v12.42019-07-22
CVE-2019-9506 [HIGH] CVE-2019-9506: iOS 12.4
Apple Security Update: About the security content of iOS 12.4
Product: iOS
Version: 12.4
CVE: CVE-2019-9506
Component: Bluetooth
Impact: An attacker in a privileged network position may be able to intercept Bluetooth traffic (Key Negotiation of Bluetooth - KNOB)
Description: An input validation issue existed in Bluetooth. This issue was addressed with improved input validation.
apple
CVE-2021-36690P3HIGHCVSS 7.5v162022-09-12
CVE-2021-36690 [HIGH] CVE-2021-36690: iOS 16
Apple Security Update: About the security content of iOS 16
Product: iOS
Version: 16
CVE: CVE-2021-36690
Component: CVE-2021-36690
apple
CVE-2016-4614P3CRITICALCVSS 9.8v9.3.32016-07-18
CVE-2016-4614 [CRITICAL] CVE-2016-4614: iOS 9.3.3
Apple Security Update: About the security content of iOS 9.3.3
Product: iOS
Version: 9.3.3
CVE: CVE-2016-4614
Component: Libc
Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Description: A buffer overflow existed within the "link_ntoa()" function in linkaddr.c. This issue was addressed through additional bounds checking.
apple
CVE-2016-4616P3CRITICALCVSS 9.8v9.3.32016-07-18
CVE-2016-4616 [CRITICAL] CVE-2016-4616: iOS 9.3.3
Apple Security Update: About the security content of iOS 9.3.3
Product: iOS
Version: 9.3.3
CVE: CVE-2016-4616
Component: Libc
Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Description: A buffer overflow existed within the "link_ntoa()" function in linkaddr.c. This issue was addressed through additional bounds checking.
apple
CVE-2016-4615P3CRITICALCVSS 9.8v9.3.32016-07-18
CVE-2016-4615 [CRITICAL] CVE-2016-4615: iOS 9.3.3
Apple Security Update: About the security content of iOS 9.3.3
Product: iOS
Version: 9.3.3
CVE: CVE-2016-4615
Component: Libc
Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Description: A buffer overflow existed within the "link_ntoa()" function in linkaddr.c. This issue was addressed through additional bounds checking.
apple
CVE-2017-8248P3CRITICALCVSS 9.8v10.3.32017-07-19
CVE-2017-8248 [CRITICAL] CVE-2017-8248: iOS 10.3.3
Apple Security Update: About the security content of iOS 10.3.3
Product: iOS
Version: 10.3.3
CVE: CVE-2017-8248
Component: CVE-2017-8248
apple
CVE-2018-16860P3HIGHCVSS 7.5v12.42019-07-22
CVE-2018-16860 [HIGH] CVE-2018-16860: iOS 12.4
Apple Security Update: About the security content of iOS 12.4
Product: iOS
Version: 12.4
CVE: CVE-2018-16860
Component: Heimdal
Impact: An issue existed in Samba that may allow attackers to perform unauthorized actions by intercepting communications between services
Description: This issue was addressed with improved checks to prevent unauthorized actions.
apple
CVE-2017-2428P3CRITICALCVSS 9.8v10.32017-03-27
CVE-2017-2428 [CRITICAL] CVE-2017-2428: iOS 10.3
Apple Security Update: About the security content of iOS 10.3
Product: iOS
Version: 10.3
CVE: CVE-2017-2428
Component: CVE-2017-2428
apple
CVE-2015-7079P3CRITICALCVSS 9.3v9.2
CVE-2015-7079 [CRITICAL] CVE-2015-7079: iOS 9.2
Apple Security Update: About the security content of iOS 9.2
Product: iOS
Version: 9.2
CVE: CVE-2015-7079
Component: CVE-ID
apple
CVE-2016-4737P3HIGHCVSS 8.8v102016-09-13
CVE-2016-4737 [HIGH] CVE-2016-4737: iOS 10
Apple Security Update: About the security content of iOS 10
Product: iOS
Version: 10
CVE: CVE-2016-4737
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved memory handling.
apple
CVE-2016-4624P3HIGHCVSS 8.8v9.3.32016-07-18
CVE-2016-4624 [HIGH] CVE-2016-4624: iOS 9.3.3
Apple Security Update: About the security content of iOS 9.3.3
Product: iOS
Version: 9.3.3
CVE: CVE-2016-4624
Component: WebKit
Impact: Visiting a maliciously crafted website may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved memory handling.
apple
CVE-2016-4623P3HIGHCVSS 8.8v9.3.32016-07-18
CVE-2016-4623 [HIGH] CVE-2016-4623: iOS 9.3.3
Apple Security Update: About the security content of iOS 9.3.3
Product: iOS
Version: 9.3.3
CVE: CVE-2016-4623
Component: WebKit
Impact: Visiting a maliciously crafted website may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved memory handling.
apple
CVE-2016-4589P3HIGHCVSS 8.8v9.3.32016-07-18
CVE-2016-4589 [HIGH] CVE-2016-4589: iOS 9.3.3
Apple Security Update: About the security content of iOS 9.3.3
Product: iOS
Version: 9.3.3
CVE: CVE-2016-4589
Component: WebKit
Impact: Visiting a maliciously crafted website may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved memory handling.
apple