IA
Product
iOS and iPadOS
On CISA KEVExploited in the wild
1,279
CVEs
60
On KEV
10.0
Max CVSS
200
New 30D
Severity mix
Critical 89High 340Medium 71Low 0
Watch
Add iOS and iPadOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-112634 New | 6.5 | Oct 26 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.7.2; before 27.2 |
| CVE-2026-86971 New | 6.5 | Oct 26 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.7.2; before 27.2 |
| CVE-2026-86957 | 6.5 | Oct 20 | An out-of-bounds read was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-84613 | 6.5 | Oct 20 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-84596 | 6.5 | Sep 14 | An out-of-bounds read was addressed with improved bounds checking Affected: before 27 |
| CVE-2026-84597 | 6.5 | Sep 14 | An out-of-bounds read issue was addressed with improved input validation Affected: before 27 |
| CVE-2026-65412 | 6.5 | Sep 14 | A null pointer dereference was addressed with improved input validation Affected: before 26.7; before 27 |
| CVE-2026-86882 | 6.5 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-43687 | 6.5 | Sep 14 | The issue was addressed with improved memory handling Affected: before 26.7; before 27 |
| CVE-2026-84519 | 6.5 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-86885 | 6.5 | Sep 14 | An input validation issue was addressed with improved input validation Affected: before 27 |
| CVE-2026-65395 | 6.5 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-86870 | 6.5 | Sep 14 | A heap buffer overflow was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-84510 | 6.5 | Sep 14 | A heap buffer overflow was addressed with improved bounds checking Affected: before 26.7; before 27 |
| CVE-2026-84635 | 6.5 | Sep 14 | A logic issue was addressed with improved state management Affected: before 27 |
| CVE-2026-86869 | 6.5 | Sep 14 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 26.7 |
| CVE-2026-64753 | 6.5 | Sep 14 | A permissions issue was addressed by removing the vulnerable code Affected: before 27 |
| CVE-2026-86879 | 6.5 | Sep 14 | A denial-of-service issue was addressed with improved input validation Affected: before 27 |
| CVE-2026-84487 | 6.5 | Sep 14 | An integer overflow was addressed with improved input validation Affected: before 26.7; before 27 |
| CVE-2026-65347 | 6.5 | Aug 17 | The issue was addressed with improved checks Affected: before 26.6.1 |
| CVE-2026-65330 | 6.5 | Aug 17 | The issue was addressed with improved memory handling Affected: before 26.6.1 |
| CVE-2026-64787 | 6.5 | Aug 17 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-64778 | 6.5 | Aug 17 | The issue was addressed with improved checks Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-43667 | 6.5 | Aug 17 | A reachable assertion was addressed with improved input validation Affected: before 18.7.10; before 26.5 |
| CVE-2026-64715 | 6.5 | Aug 17 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.6.1 |
| CVE-2026-43804 | 6.5 | Jul 27 | This issue was addressed through improved state management Affected: before 26.6 |
| CVE-2026-64730 | 6.5 | Jul 27 | The issue was addressed with improved UI Affected: before 26.6 |
| CVE-2026-43821 | 6.5 | Jul 27 | An access issue was addressed with improved access restrictions Affected: before 18.7.10; before 26.6 |
| CVE-2026-64728 | 6.5 | Jul 27 | A permissions issue was addressed with improved validation Affected: before 26.6 |
| CVE-2026-64735 | 6.5 | Jul 27 | An inconsistent user interface issue was addressed with improved state management Affected: before 18.7.10; before 26.6 |
| CVE-2026-64742 | 6.5 | Jul 27 | This issue was addressed by using HTTPS when sending information over the network Affected: before 18.7.10; before 26.6 |
| CVE-2026-64743 | 6.5 | Jul 27 | An authorization issue was addressed with improved state management Affected: before 18.7.10; before 26.6 |
| CVE-2026-43700 | 6.5 | Jun 29 | A cross-origin issue was addressed with improved tracking of security origins Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43716 | 6.5 | Jun 29 | The issue was addressed with improved memory handling Affected: before 26.5.2 |
| CVE-2026-43720 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43721 | 6.5 | Jun 29 | This issue was addressed through improved state management Affected: before 26.5.2 |
| CVE-2026-39872 | 6.5 | Jun 29 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43717 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43740 | 6.5 | Jun 29 | The issue was addressed with improved memory handling Affected: before 26.5.2 |
| CVE-2026-43663 | 6.5 | Jun 29 | The issue was addressed with improved memory handling Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43726 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43706 | 6.5 | Jun 29 | A double free issue was addressed with improved memory management Affected: before 26.5.2 |
| CVE-2026-43746 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43707 | 6.5 | Jun 29 | A memory corruption issue was addressed with improved memory handling Affected: before 26.5.2 |
| CVE-2026-43727 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43732 | 6.5 | Jun 29 | A path handling issue was addressed with improved validation Affected: before 26.5.2 |
| CVE-2026-43712 | 6.5 | Jun 29 | The issue was addressed with improved memory handling Affected: before 26.5.2 |
| CVE-2026-43745 | 6.5 | Jun 29 | An out-of-bounds write issue was addressed with improved input validation Affected: before 18.7.10; before 26.5.2 |
| CVE-2026-43713 | 6.5 | Jun 29 | A permissions issue was addressed with additional restrictions Affected: before 26.5.2 |
| CVE-2026-43709 | 6.5 | Jun 29 | A use-after-free issue was addressed with improved memory management Affected: before 26.5.2 |
The 500 most important CVEs for this product (exploited first, then by severity)