Apple Ios And Ipados vulnerabilities
2,045 known vulnerabilities affecting apple/ios_and_ipados.
Total CVEs
2,045
CISA KEV
58
actively exploited
Public exploits
18
Exploited in wild
73
Severity breakdown
CRITICAL112HIGH698MEDIUM961LOW130UNKNOWN144
Vulnerabilities
Page 76 of 103
CVE-2021-30697P4MEDIUMCVSS 5.5≥ unspecified, < 14.62021-09-08
CVE-2021-30697 [MEDIUM] CVE-2021-30697: A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Securi
A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A local user may be able to leak sensitive user information.
nvd
CVE-2021-1786P4MEDIUMCVSS 5.5≥ unspecified, < 14.42021-04-02
CVE-2021-1786 [MEDIUM] CVE-2021-1786: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to create or modify system files.
nvd
CVE-2024-40784P4MEDIUMCVSS 5.5fixed in 16.7.9fixed in 17.62024-07-29
CVE-2024-40784 [MEDIUM] CWE-190 CVE-2024-40784: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing a maliciously crafted file may lead to unexpected app termination.
nvd
CVE-2024-27873P4MEDIUMCVSS 5.5fixed in 16.7.9fixed in 17.62024-07-29
CVE-2024-27873 [MEDIUM] CWE-787 CVE-2024-27873: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iO
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Processing a maliciously crafted video file may lead to unexpected app termination.
nvd
CVE-2021-30921P4MEDIUMCVSS 5.5≥ unspecified, < 14.52021-08-24
CVE-2021-30921 [MEDIUM] CWE-668 CVE-2021-30921: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPad
A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5. A user's password may be visible onscreen.
nvd
CVE-2025-24214P4MEDIUMCVSS 5.5fixed in 18.42025-03-31
CVE-2025-24214 [MEDIUM] CWE-284 CVE-2025-24214: A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 18.
A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data.
nvd
CVE-2025-24283P4MEDIUMCVSS 5.5fixed in 18.42025-03-31
CVE-2025-24283 [MEDIUM] CWE-200 CVE-2025-24283: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPad
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data.
nvd
CVE-2024-44273P4MEDIUMCVSS 5.5fixed in 18.12024-10-28
CVE-2024-44273 [MEDIUM] CWE-59 CVE-2024-44273: This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPa
This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. A malicious app may be able to access private information.
nvd
CVE-2021-1877P4MEDIUMCVSS 5.5≥ unspecified, < 14.52021-09-08
CVE-2021-1877 [MEDIUM] CWE-125 CVE-2021-1877: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.
nvd
CVE-2021-1852P4MEDIUMCVSS 5.5≥ unspecified, < 14.52021-09-08
CVE-2021-1852 [MEDIUM] CWE-125 CVE-2021-1852: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.
nvd
CVE-2026-20608P4MEDIUMCVSS 5.5fixed in 18.7.5fixed in 26.32026-02-11
CVE-2026-20608 [MEDIUM] CWE-770 CVE-2026-20608: This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS
This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.
nvd
CVE-2025-30463P4MEDIUMCVSS 5.5fixed in 18.42025-03-31
CVE-2025-30463 [MEDIUM] CWE-200 CVE-2025-30463: The issue was addressed with improved restriction of data container access. This issue is fixed in i
The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.
nvd
CVE-2025-24117P4MEDIUMCVSS 5.5fixed in 18.32025-01-27
CVE-2025-24117 [MEDIUM] CWE-922 CVE-2025-24117: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iO
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, visionOS 2.3, watchOS 11.3. An app may be able to fingerprint the user.
nvd
CVE-2025-24202P4MEDIUMCVSS 5.5fixed in 18.42025-03-31
CVE-2025-24202 [MEDIUM] CWE-284 CVE-2025-24202: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPad
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.
nvd
CVE-2024-23283P4MEDIUMCVSS 5.5fixed in 16.7.62024-03-08
CVE-2024-23283 [MEDIUM] CVE-2024-23283: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access user-sensitive data.
nvd
CVE-2023-28826P4MEDIUMCVSS 5.5≥ unspecified, < 16.72024-03-08
CVE-2023-28826 [MEDIUM] CWE-200 CVE-2023-28826: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iO
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.1, macOS Ventura 13.6.5. An app may be able to access sensitive user data.
nvd
CVE-2023-32368P4MEDIUMCVSS 5.5≥ unspecified, < 16.52023-06-23
CVE-2023-32368 [MEDIUM] CWE-125 CVE-2023-32368: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. Processing a 3D model may result in disclosure of process memory.
nvd
CVE-2023-32410P4MEDIUMCVSS 5.5≥ unspecified, < 15.72023-06-23
CVE-2023-32410 [MEDIUM] CWE-125 CVE-2023-32410: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15.7.
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to leak sensitive kernel state.
nvd
CVE-2023-32392P4MEDIUMCVSS 5.5≥ unspecified, < 16.52023-06-23
CVE-2023-32392 [MEDIUM] CWE-532 CVE-2023-32392: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location information.
nvd
CVE-2023-32408P4MEDIUMCVSS 5.5≥ unspecified, < 15.7≥ unspecified, < 16.52023-06-23
CVE-2023-32408 [MEDIUM] CVE-2023-32408: The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.5, tvOS 1
The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location information.
nvd