Apple Ios And Ipados vulnerabilities
1,656 known vulnerabilities affecting apple/ios_and_ipados.
Total CVEs
1,656
CISA KEV
57
actively exploited
Public exploits
17
Exploited in wild
72
Severity breakdown
CRITICAL100HIGH640MEDIUM796LOW120
Vulnerabilities
Page 62 of 83
CVE-2021-1877P4MEDIUMCVSS 5.5≥ unspecified, < 14.52021-09-08
CVE-2021-1877 [MEDIUM] CWE-125 CVE-2021-1877: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.
nvd
CVE-2021-1852P4MEDIUMCVSS 5.5≥ unspecified, < 14.52021-09-08
CVE-2021-1852 [MEDIUM] CWE-125 CVE-2021-1852: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.
nvd
CVE-2023-41072P4MEDIUMCVSS 5.5≥ unspecified, < 17.12023-10-25
CVE-2023-41072 [MEDIUM] CVE-2023-41072: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.
nvd
CVE-2023-40428P4MEDIUMCVSS 5.5≥ unspecified, < 172023-09-27
CVE-2023-40428 [MEDIUM] CVE-2023-40428: The issue was addressed with improved handling of caches. This issue is fixed in iOS 17 and iPadOS 1
The issue was addressed with improved handling of caches. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to access sensitive user data.
nvd
CVE-2025-24214P4MEDIUMCVSS 5.5fixed in 18.42025-03-31
CVE-2025-24214 [MEDIUM] CWE-284 CVE-2025-24214: A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 18.
A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data.
nvd
CVE-2025-24117P4MEDIUMCVSS 5.5fixed in 18.32025-01-27
CVE-2025-24117 [MEDIUM] CWE-922 CVE-2025-24117: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iO
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, visionOS 2.3, watchOS 11.3. An app may be able to fingerprint the user.
nvd
CVE-2025-24283P4MEDIUMCVSS 5.5fixed in 18.42025-03-31
CVE-2025-24283 [MEDIUM] CWE-200 CVE-2025-24283: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPad
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data.
nvd
CVE-2025-30463P4MEDIUMCVSS 5.5fixed in 18.42025-03-31
CVE-2025-30463 [MEDIUM] CWE-200 CVE-2025-30463: The issue was addressed with improved restriction of data container access. This issue is fixed in i
The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.
nvd
CVE-2023-28826P4MEDIUMCVSS 5.5≥ unspecified, < 16.72024-03-08
CVE-2023-28826 [MEDIUM] CWE-200 CVE-2023-28826: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iO
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.1, macOS Ventura 13.6.5. An app may be able to access sensitive user data.
nvd
CVE-2023-32368P4MEDIUMCVSS 5.5≥ unspecified, < 16.52023-06-23
CVE-2023-32368 [MEDIUM] CWE-125 CVE-2023-32368: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. Processing a 3D model may result in disclosure of process memory.
nvd
CVE-2025-24202P4MEDIUMCVSS 5.5fixed in 18.42025-03-31
CVE-2025-24202 [MEDIUM] CWE-284 CVE-2025-24202: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPad
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.
nvd
CVE-2023-32410P4MEDIUMCVSS 5.5≥ unspecified, < 15.72023-06-23
CVE-2023-32410 [MEDIUM] CWE-125 CVE-2023-32410: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15.7.
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to leak sensitive kernel state.
nvd
CVE-2023-32392P4MEDIUMCVSS 5.5≥ unspecified, < 16.52023-06-23
CVE-2023-32392 [MEDIUM] CWE-532 CVE-2023-32392: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location information.
nvd
CVE-2023-32408P4MEDIUMCVSS 5.5≥ unspecified, < 15.7≥ unspecified, < 16.52023-06-23
CVE-2023-32408 [MEDIUM] CVE-2023-32408: The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.5, tvOS 1
The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location information.
nvd
CVE-2023-27942P4MEDIUMCVSS 5.5≥ unspecified, < 16.42023-05-08
CVE-2023-27942 [MEDIUM] CWE-922 CVE-2023-27942: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 an
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data.
nvd
CVE-2023-32372P4MEDIUMCVSS 5.5≥ unspecified, < 16.52023-06-23
CVE-2023-32372 [MEDIUM] CWE-125 CVE-2023-32372: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. Processing an image may result in disclosure of process memory.
nvd
CVE-2023-40528P4MEDIUMCVSS 5.5≥ unspecified, < 172024-01-23
CVE-2023-40528 [MEDIUM] CWE-284 CVE-2023-40528: This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 17, watchOS 10
This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 17, watchOS 10, macOS Sonoma 14, iOS 17 and iPadOS 17, macOS Ventura 13.6.4. An app may be able to bypass Privacy preferences.
nvd
CVE-2023-32388P4MEDIUMCVSS 5.5≥ unspecified, < 15.7≥ unspecified, < 16.52023-06-23
CVE-2023-32388 [MEDIUM] CWE-281 CVE-2023-32388: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to bypass Privacy preferences.
nvd
CVE-2023-27961P4MEDIUMCVSS 5.5≥ unspecified, < 16.4≥ unspecified, < 15.72023-05-08
CVE-2023-27961 [MEDIUM] CWE-20 CVE-2023-27961: Multiple validation issues were addressed with improved input sanitization. This issue is fixed in m
Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4, macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltrate user information.
nvd
CVE-2023-27931P4MEDIUMCVSS 5.5≥ unspecified, < 16.42023-05-08
CVE-2023-27931 [MEDIUM] CWE-203 CVE-2023-27931: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3,
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.3, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data.
nvd