Apple iOS vulnerabilities
4,134 known vulnerabilities affecting apple/iphone_os.
Total CVEs
4,134
CISA KEV
92
actively exploited
Public exploits
276
Exploited in wild
141
Severity breakdown
CRITICAL340HIGH1687MEDIUM1818LOW289
Vulnerabilities
Page 95 of 207
CVE-2018-4340P3HIGHCVSS 7.8fixed in 12.02019-04-03
CVE-2018-4340 [HIGH] CWE-119 CVE-2018-4340: A memory corruption issue was addressed with improved memory handling. This issue affected versions
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
nvd
CVE-2018-4425P3HIGHCVSS 7.8fixed in 12.02019-04-03
CVE-2018-4425 [HIGH] CWE-119 CVE-2018-4425: A memory corruption issue was addressed with improved memory handling. This issue affected versions
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
nvd
CVE-2018-4401P3HIGHCVSS 7.8fixed in 12.02019-04-03
CVE-2018-4401 [HIGH] CWE-119 CVE-2018-4401: A memory corruption issue was addressed with improved memory handling. This issue affected versions
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
nvd
CVE-2018-4336P3HIGHCVSS 7.8fixed in 12.02019-04-03
CVE-2018-4336 [HIGH] CWE-119 CVE-2018-4336: A memory corruption issue was addressed with improved memory handling. This issue affected versions
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
nvd
CVE-2018-4383P3HIGHCVSS 7.8fixed in 12.02019-04-03
CVE-2018-4383 [HIGH] CWE-119 CVE-2018-4383: A memory corruption issue was addressed with improved state management. This issue affected versions
A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
nvd
CVE-2018-4337P3HIGHCVSS 7.8fixed in 12.02019-04-03
CVE-2018-4337 [HIGH] CWE-119 CVE-2018-4337: A memory corruption issue was addressed with improved memory handling. This issue affected versions
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
nvd
CVE-2018-4408P3HIGHCVSS 7.8fixed in 12.02019-04-03
CVE-2018-4408 [HIGH] CWE-119 CVE-2018-4408: A memory corruption issue was addressed with improved input validation This issue affected versions
A memory corruption issue was addressed with improved input validation This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
nvd
CVE-2018-4419P3HIGHCVSS 7.8fixed in 12.12019-04-03
CVE-2018-4419 [HIGH] CWE-119 CVE-2018-4419: A memory corruption issue was addressed with improved memory handling. This issue affected versions
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.
nvd
CVE-2018-4426P3HIGHCVSS 7.8fixed in 12.02019-04-03
CVE-2018-4426 [HIGH] CWE-119 CVE-2018-4426: A memory corruption issue was addressed with improved memory handling. This issue affected versions
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
nvd
CVE-2018-4461P3HIGHCVSS 7.8fixed in 12.1.12019-04-03
CVE-2018-4461 [HIGH] CWE-119 CVE-2018-4461: A memory corruption issue was addressed with improved input validation. This issue affected versions
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
nvd
CVE-2018-4447P3HIGHCVSS 7.8fixed in 12.1.12019-04-03
CVE-2018-4447 [HIGH] CWE-119 CVE-2018-4447: A memory corruption issue was addressed with improved state management. This issue affected versions
A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
nvd
CVE-2017-2499P3HIGHCVSS 7.8fixed in 10.3.22017-05-22
CVE-2017-2499 [HIGH] CWE-119 CVE-2017-2499: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to execute arbitrary unsigned code or cause a denial of service (memory corruption) via a crafted app.
nvd
CVE-2019-6202P3HIGHCVSS 7.8fixed in 12.1.32019-03-05
CVE-2019-6202 [HIGH] CWE-125 CVE-2019-6202: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges.
nvd
CVE-2019-8552P3HIGHCVSS 7.8fixed in 12.22019-12-18
CVE-2019-8552 [HIGH] CWE-665 CVE-2019-8552: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iO
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to elevate privileges.
nvd
CVE-2018-4394P3HIGHCVSS 7.8fixed in 12.12019-04-03
CVE-2018-4394 [HIGH] CWE-119 CVE-2018-4394: A memory corruption issue was addressed with improved input validation. This issue affected versions
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1, iTunes 12.9.1.
nvd
CVE-2019-8665P3HIGHCVSS 7.5fixed in 12.42019-12-18
CVE-2019-8665 [HIGH] CWE-20 CVE-2019-8665: A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4, w
A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4, watchOS 5.3. A remote attacker may cause an unexpected application termination.
nvd
CVE-2021-1833P3HIGHCVSS 7.8fixed in 14.52021-09-08
CVE-2021-1833 [HIGH] CVE-2021-1833: This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. An a
This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to gain elevated privileges.
nvd
CVE-2015-3703P3MEDIUMCVSS 6.8≤ 8.32015-07-03
CVE-2015-3703 [MEDIUM] CWE-119 CVE-2015-3703: ImageIO in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary
ImageIO in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF image.
nvd
CVE-2021-1767P3HIGHCVSS 7.8fixed in 14.42021-04-02
CVE-2021-1767 [HIGH] CWE-787 CVE-2021-1767: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security U
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to heap corruption.
nvd
CVE-2020-9931P3HIGHCVSS 7.5fixed in 13.62020-10-16
CVE-2020-9931 [HIGH] CWE-20 CVE-2020-9931: A denial of service issue was addressed with improved input validation. This issue is fixed in iOS 1
A denial of service issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6. A remote attacker may cause an unexpected application termination.
nvd