Apple iOS vulnerabilities
4,495 known vulnerabilities affecting apple/iphone_os.
Total CVEs
4,495
CISA KEV
94
actively exploited
Public exploits
278
Exploited in wild
143
Severity breakdown
CRITICAL348HIGH1797MEDIUM2041LOW309
Vulnerabilities
Page 189 of 225
CVE-2026-65377P4MEDIUMCVSS 5.5fixed in 26.72026-09-14
CVE-2026-65377 [MEDIUM] CWE-125 CVE-2026-65377: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
nvd
CVE-2026-65402P4MEDIUMCVSS 5.5fixed in 26.72026-09-14
CVE-2026-65402 [MEDIUM] CWE-416 CVE-2026-65402: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
nvd
CVE-2026-112698P4MEDIUMCVSS 5.5fixed in 26.7.2≥ 27.0, < 27.22026-10-26
CVE-2026-112698 [MEDIUM] CWE-119 CVE-2026-112698: The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.
nvd
CVE-2026-86924P4MEDIUMCVSS 5.5fixed in 26.72026-09-14
CVE-2026-86924 [MEDIUM] CWE-20 CVE-2026-86924: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 2
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination.
nvd
CVE-2026-43816P4MEDIUMCVSS 5.5fixed in 26.62026-07-27
CVE-2026-43816 [MEDIUM] CWE-787 CVE-2026-43816: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
nvd
CVE-2026-64693P4MEDIUMCVSS 5.5fixed in 26.62026-07-27
CVE-2026-64693 [MEDIUM] CWE-843 CVE-2026-64693: A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iP
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted image may lead to a denial-of-service.
nvd
CVE-2026-43739P4MEDIUMCVSS 5.5fixed in 26.62026-07-27
CVE-2026-43739 [MEDIUM] CWE-787 CVE-2026-43739: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
nvd
CVE-2026-65408P4MEDIUMCVSS 5.5fixed in 26.72026-09-14
CVE-2026-65408 [MEDIUM] CWE-190 CVE-2026-65408: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 an
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
nvd
CVE-2025-43282P4MEDIUMCVSS 5.5fixed in 18.62025-10-15
CVE-2025-43282 [MEDIUM] CWE-415 CVE-2025-43282: A double free issue was addressed with improved memory management. This issue is fixed in iOS 18.6 a
A double free issue was addressed with improved memory management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. An app may be able to cause unexpected system termination.
nvd
CVE-2026-84521P4MEDIUMCVSS 5.5fixed in 26.72026-09-14
CVE-2026-84521 [MEDIUM] CWE-416 CVE-2026-84521: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to cause unexpected system termination.
nvd
CVE-2026-20621P4MEDIUMCVSS 5.5fixed in 26.32026-02-11
CVE-2026-20621 [MEDIUM] CWE-119 CVE-2026-20621: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. An app may be able to cause unexpected system termination or corrupt kernel memory.
nvd
CVE-2026-43808P4MEDIUMCVSS 5.5fixed in 26.62026-09-14
CVE-2026-43808 [MEDIUM] CWE-416 CVE-2026-43808: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
nvd
CVE-2026-65367P4MEDIUMCVSS 5.5fixed in 18.7.9≥ 26.0, < 26.52026-08-25
CVE-2026-65367 [MEDIUM] CWE-476 CVE-2026-65367: A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination.
nvd
CVE-2016-7651P4MEDIUMCVSS 5.3≤ 10.1.12017-02-20
CVE-2016-7651 [MEDIUM] CWE-285 CVE-2016-7651: An issue was discovered in certain Apple products. iOS before 10.2 is affected. watchOS before 3.1.1
An issue was discovered in certain Apple products. iOS before 10.2 is affected. watchOS before 3.1.1 is affected. The issue involves the "Accounts" component, which allows local users to bypass intended authorization restrictions by leveraging the mishandling of an app uninstall.
nvd
CVE-2015-5788P4MEDIUMCVSS 4.3≤ 8.4.12015-09-18
CVE-2015-5788 [MEDIUM] CWE-200 CVE-2015-5788: The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Or
The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element.
nvd
CVE-2015-7116P4MEDIUMCVSS 4.3≤ 9.12016-01-10
CVE-2015-7116 [MEDIUM] CVE-2015-7116: libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to
libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted XML document, a different vulnerability than CVE-2015-7115.
nvd
CVE-2015-7115P4MEDIUMCVSS 4.3≤ 9.12016-01-10
CVE-2015-7115 [MEDIUM] CWE-119 CVE-2015-7115: libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to
libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted XML document, a different vulnerability than CVE-2015-7116.
nvd
CVE-2015-7043P4MEDIUMCVSS 4.3≤ 9.12015-12-11
CVE-2015-7043 [MEDIUM] CVE-2015-7043: The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 all
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7042.
nvd
CVE-2015-7041P4MEDIUMCVSS 4.3≤ 9.12015-12-11
CVE-2015-7041 [MEDIUM] CVE-2015-7041: The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 all
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7042, and CVE-2015-7043.
nvd
CVE-2015-7042P4MEDIUMCVSS 4.3≤ 9.12015-12-11
CVE-2015-7042 [MEDIUM] CVE-2015-7042: The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 all
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7043.
nvd