Apple iOS vulnerabilities
1,765 known vulnerabilities affecting apple/ios.
Total CVEs
1,765
CISA KEV
27
actively exploited
Public exploits
229
Exploited in wild
43
Severity breakdown
CRITICAL119HIGH907MEDIUM638LOW94UNKNOWN7
Vulnerabilities
Page 28 of 89
CVE-2021-36690P3HIGHCVSS 7.5v162022-09-12
CVE-2021-36690 [HIGH] CVE-2021-36690: iOS 16
Apple Security Update: About the security content of iOS 16
Product: iOS
Version: 16
CVE: CVE-2021-36690
Component: CVE-2021-36690
apple
CVE-2017-2513P3CRITICALCVSS 9.8v10.3.22017-05-15
CVE-2017-2513 [CRITICAL] CVE-2017-2513: iOS 10.3.2
Apple Security Update: About the security content of iOS 10.3.2
Product: iOS
Version: 10.3.2
CVE: CVE-2017-2513
Component: SQLite
Impact: A maliciously crafted SQL query may lead to arbitrary code execution
Description: A use after free issue was addressed through improved memory management.
apple
CVE-2016-4614P3CRITICALCVSS 9.8v9.3.32016-07-18
CVE-2016-4614 [CRITICAL] CVE-2016-4614: iOS 9.3.3
Apple Security Update: About the security content of iOS 9.3.3
Product: iOS
Version: 9.3.3
CVE: CVE-2016-4614
Component: Libc
Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Description: A buffer overflow existed within the "link_ntoa()" function in linkaddr.c. This issue was addressed through additional bounds checking.
apple
CVE-2016-4616P3CRITICALCVSS 9.8v9.3.32016-07-18
CVE-2016-4616 [CRITICAL] CVE-2016-4616: iOS 9.3.3
Apple Security Update: About the security content of iOS 9.3.3
Product: iOS
Version: 9.3.3
CVE: CVE-2016-4616
Component: Libc
Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Description: A buffer overflow existed within the "link_ntoa()" function in linkaddr.c. This issue was addressed through additional bounds checking.
apple
CVE-2016-4615P3CRITICALCVSS 9.8v9.3.32016-07-18
CVE-2016-4615 [CRITICAL] CVE-2016-4615: iOS 9.3.3
Apple Security Update: About the security content of iOS 9.3.3
Product: iOS
Version: 9.3.3
CVE: CVE-2016-4615
Component: Libc
Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Description: A buffer overflow existed within the "link_ntoa()" function in linkaddr.c. This issue was addressed through additional bounds checking.
apple
CVE-2017-8248P3CRITICALCVSS 9.8v10.3.32017-07-19
CVE-2017-8248 [CRITICAL] CVE-2017-8248: iOS 10.3.3
Apple Security Update: About the security content of iOS 10.3.3
Product: iOS
Version: 10.3.3
CVE: CVE-2017-8248
Component: CVE-2017-8248
apple
CVE-2017-2428P3CRITICALCVSS 9.8v10.32017-03-27
CVE-2017-2428 [CRITICAL] CVE-2017-2428: iOS 10.3
Apple Security Update: About the security content of iOS 10.3
Product: iOS
Version: 10.3
CVE: CVE-2017-2428
Component: CVE-2017-2428
apple
CVE-2017-2423P3CRITICALCVSS 9.8v10.32017-03-27
CVE-2017-2423 [CRITICAL] CVE-2017-2423: iOS 10.3
Apple Security Update: About the security content of iOS 10.3
Product: iOS
Version: 10.3
CVE: CVE-2017-2423
Component: Security
Impact: Validating empty signatures with SecKeyRawVerify() may unexpectedly succeed
Description: An validation issue existed with cryptographic API calls. This issue was addressed through improved parameter validation.
apple
CVE-2015-7072P3CRITICALCVSS 9.3v9.2
CVE-2015-7072 [CRITICAL] CVE-2015-7072: iOS 9.2
Apple Security Update: About the security content of iOS 9.2
Product: iOS
Version: 9.2
CVE: CVE-2015-7072
Component: CVE-ID
apple
CVE-2019-7288P3CRITICALCVSS 9.8≥ unspecified, < 12.12020-10-27
CVE-2019-7288 [CRITICAL] CVE-2019-7288: The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macO
The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos .
nvdapple
CVE-2015-7079P3CRITICALCVSS 9.3v9.2
CVE-2015-7079 [CRITICAL] CVE-2015-7079: iOS 9.2
Apple Security Update: About the security content of iOS 9.2
Product: iOS
Version: 9.2
CVE: CVE-2015-7079
Component: CVE-ID
apple
CVE-2016-1857P3HIGHCVSS 8.8v9.3.2
CVE-2016-1857 [HIGH] CVE-2016-1857: iOS 9.3.2
Apple Security Update: About the security content of iOS 9.3.2
Product: iOS
Version: 9.3.2
CVE: CVE-2016-1857
Component: CVE-ID
apple
CVE-2016-4737P3HIGHCVSS 8.8v102016-09-13
CVE-2016-4737 [HIGH] CVE-2016-4737: iOS 10
Apple Security Update: About the security content of iOS 10
Product: iOS
Version: 10
CVE: CVE-2016-4737
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved memory handling.
apple
CVE-2016-4730P3HIGHCVSS 8.8v102016-09-13
CVE-2016-4730 [HIGH] CVE-2016-4730: iOS 10
Apple Security Update: About the security content of iOS 10
Product: iOS
Version: 10
CVE: CVE-2016-4730
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved memory handling.
apple
CVE-2016-4735P3HIGHCVSS 8.8v102016-09-13
CVE-2016-4735 [HIGH] CVE-2016-4735: iOS 10
Apple Security Update: About the security content of iOS 10
Product: iOS
Version: 10
CVE: CVE-2016-4735
Component: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved memory handling.
apple
CVE-2016-4623P3HIGHCVSS 8.8v9.3.32016-07-18
CVE-2016-4623 [HIGH] CVE-2016-4623: iOS 9.3.3
Apple Security Update: About the security content of iOS 9.3.3
Product: iOS
Version: 9.3.3
CVE: CVE-2016-4623
Component: WebKit
Impact: Visiting a maliciously crafted website may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved memory handling.
apple
CVE-2016-4624P3HIGHCVSS 8.8v9.3.32016-07-18
CVE-2016-4624 [HIGH] CVE-2016-4624: iOS 9.3.3
Apple Security Update: About the security content of iOS 9.3.3
Product: iOS
Version: 9.3.3
CVE: CVE-2016-4624
Component: WebKit
Impact: Visiting a maliciously crafted website may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved memory handling.
apple
CVE-2016-4589P3HIGHCVSS 8.8v9.3.32016-07-18
CVE-2016-4589 [HIGH] CVE-2016-4589: iOS 9.3.3
Apple Security Update: About the security content of iOS 9.3.3
Product: iOS
Version: 9.3.3
CVE: CVE-2016-4589
Component: WebKit
Impact: Visiting a maliciously crafted website may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed through improved memory handling.
apple
CVE-2016-1856P3HIGHCVSS 8.8v9.3.2
CVE-2016-1856 [HIGH] CVE-2016-1856: iOS 9.3.2
Apple Security Update: About the security content of iOS 9.3.2
Product: iOS
Version: 9.3.2
CVE: CVE-2016-1856
Component: CVE-ID
apple
CVE-2016-1854P3HIGHCVSS 8.8v9.3.2
CVE-2016-1854 [HIGH] CVE-2016-1854: iOS 9.3.2
Apple Security Update: About the security content of iOS 9.3.2
Product: iOS
Version: 9.3.2
CVE: CVE-2016-1854
Component: CVE-ID
apple