Apple iOS vulnerabilities
4,134 known vulnerabilities affecting apple/iphone_os.
Total CVEs
4,134
CISA KEV
92
actively exploited
Public exploits
276
Exploited in wild
141
Severity breakdown
CRITICAL340HIGH1687MEDIUM1818LOW289
Vulnerabilities
Page 71 of 207
CVE-2021-1737P3HIGHCVSS 7.8fixed in 14.42021-04-02
CVE-2021-1737 [HIGH] CWE-787 CVE-2021-1737: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Bi
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2022-32898P3HIGHCVSS 7.8fixed in 15.72022-11-01
CVE-2022-32898 [HIGH] CVE-2022-32898: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13, watchOS 9. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2018-4369P3HIGHCVSS 7.5fixed in 12.12019-04-03
CVE-2018-4369 [HIGH] CWE-20 CVE-2018-4369: A logic issue was addressed with improved state management. This issue affected versions prior to iO
A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.
nvd
CVE-2024-44285P3HIGHCVSS 7.8≥ 18.0, < 18.12024-10-28
CVE-2024-44285 [HIGH] CWE-416 CVE-2024-44285: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. An app may be able to cause unexpected system termination or corrupt kernel memory.
nvd
CVE-2022-32821P3HIGHCVSS 7.8fixed in 15.62022-09-23
CVE-2022-32821 [HIGH] CWE-787 CVE-2022-32821: A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.7
A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2019-8787P3HIGHCVSS 7.5fixed in 13.22019-12-18
CVE-2019-8787 [HIGH] CWE-125 CVE-2019-8787: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A remote attacker may be able to leak memory.
nvd
CVE-2022-32810P3HIGHCVSS 7.8fixed in 15.62022-08-24
CVE-2022-32810 [HIGH] CWE-787 CVE-2022-32810: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, w
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2022-32840P3HIGHCVSS 7.8fixed in 15.62022-08-24
CVE-2022-32840 [HIGH] CWE-269 CVE-2022-32840: This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, watchOS 8
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2022-32947P3HIGHCVSS 7.8fixed in 16.12022-11-01
CVE-2022-32947 [HIGH] CWE-787 CVE-2022-32947: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2022-32829P3HIGHCVSS 7.8fixed in 15.62022-09-23
CVE-2022-32829 [HIGH] CWE-269 CVE-2022-32829: This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macO
This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2015-6974P3CRITICALCVSS 9.3≤ 9.0.22015-10-23
CVE-2015-6974 [CRITICAL] CWE-119 CVE-2015-6974: IOHIDFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers
IOHIDFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
nvd
CVE-2022-32932P3HIGHCVSS 7.8fixed in 15.7.1v16.02022-11-01
CVE-2022-32932 [HIGH] CWE-787 CVE-2022-32932: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2015-5876P3CRITICALCVSS 9.3≤ 8.4.12015-09-18
CVE-2015-5876 [CRITICAL] CWE-119 CVE-2015-5876: dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged c
dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
nvd
CVE-2021-30825P3HIGHCVSS 7.8fixed in 15.02021-10-19
CVE-2021-30825 [HIGH] CVE-2021-30825: This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15. A local
This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to cause unexpected application termination or arbitrary code execution.
nvd
CVE-2022-42801P3HIGHCVSS 7.8fixed in 5.7.12022-11-01
CVE-2022-42801 [HIGH] CWE-693 CVE-2022-42801: A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and i
A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2023-27930P3HIGHCVSS 7.8fixed in 16.52023-06-23
CVE-2023-27930 [HIGH] CWE-843 CVE-2023-27930: A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadO
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2015-5867P3CRITICALCVSS 9.3≤ 8.4.12015-09-18
CVE-2015-5867 [CRITICAL] CWE-119 CVE-2015-5867: IOHIDFamily in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context
IOHIDFamily in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
nvd
CVE-2021-30902P3HIGHCVSS 7.8fixed in 14.8.1v15.02021-08-24
CVE-2021-30902 [HIGH] CWE-416 CVE-2021-30902: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A local attacker may be able to cause unexpected application termination or arbitrary code execution.
nvd
CVE-2015-6979P3CRITICALCVSS 9.3≤ 9.0.22015-10-23
CVE-2015-6979 [CRITICAL] CWE-119 CVE-2015-6979: GasGauge in Apple iOS before 9.1 allows attackers to execute arbitrary code in a privileged context
GasGauge in Apple iOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
nvd
CVE-2022-32802P3HIGHCVSS 7.8fixed in 15.62022-09-20
CVE-2022-32802 [HIGH] CWE-693 CVE-2022-32802: A logic issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, t
A logic issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, tvOS 15.6, macOS Monterey 12.5. Processing a maliciously crafted file may lead to arbitrary code execution.
nvd