IA
Product
iOS and iPadOS
On CISA KEVExploited in the wild
1,638
CVEs
60
On KEV
10.0
Max CVSS
200
New 30D
Severity mix
Critical 101High 389Medium 10Low 0
Watch
Add iOS and iPadOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-43342 | 9.8 | Sep 15 | A correctness issue was addressed with improved checks Affected: before 18.7; before 26 |
| CVE-2025-31255 | 9.8 | Sep 15 | An authorization issue was addressed with improved state management Affected: before 26 |
| CVE-2025-43347 | 9.8 | Sep 15 | This issue was addressed by removing the vulnerable code Affected: before 26 |
| CVE-2025-43186 | 9.8 | Jul 29 | The issue was addressed with improved memory handling Affected: before 18.6 |
| CVE-2025-43209 | 9.8 | Jul 29 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 18.6 |
| CVE-2025-43234 | 9.8 | Jul 29 | Multiple memory corruption issues were addressed with improved input validation Affected: before 18.6 |
| CVE-2025-30466 | 9.8 | May 29 | This issue was addressed through improved state management Affected: before 18.4 |
| CVE-2025-24167 | 9.8 | Mar 31 | This issue was addressed through improved state management Affected: before 18.4 |
| CVE-2025-24238 | 9.8 | Mar 31 | A logic issue was addressed with improved checks Affected: before 18.4 |
| CVE-2025-30426 | 9.8 | Mar 31 | This issue was addressed with additional entitlement checks Affected: before 18.4 |
| CVE-2025-30430 | 9.8 | Mar 31 | This issue was addressed through improved state management Affected: before 18.4 |
| CVE-2025-24264 | 9.8 | Mar 31 | The issue was addressed with improved memory handling Affected: before 18.4 |
| CVE-2025-31183 | 9.8 | Mar 31 | The issue was addressed with improved restriction of data container access Affected: before 18.4 |
| CVE-2025-24211 | 9.8 | Mar 31 | This issue was addressed with improved memory handling Affected: before 18.4 |
| CVE-2025-24230 | 9.8 | Mar 31 | An out-of-bounds read issue was addressed with improved input validation Affected: before 18.4 |
| CVE-2025-24178 | 9.8 | Mar 31 | This issue was addressed through improved state management Affected: before 18.4 |
| CVE-2025-31182 | 9.8 | Mar 31 | This issue was addressed with improved handling of symlinks Affected: before 18.4 |
| CVE-2025-24237 | 9.8 | Mar 31 | A buffer overflow was addressed with improved bounds checking Affected: before 18.4 |
| CVE-2025-30433 | 9.8 | Mar 31 | This issue was addressed with improved access restrictions Affected: before 18.4 |
| CVE-2025-24190 | 9.8 | Mar 31 | The issue was addressed with improved memory handling Affected: before 18.4 |
| CVE-2024-44299 | 9.8 | Dec 11 | The issue was addressed with improved bounds checks Affected: before 18.1 |
| CVE-2024-44241 | 9.8 | Dec 11 | The issue was addressed with improved bounds checks Affected: before 18.1 |
| CVE-2024-54534 | 9.8 | Dec 11 | The issue was addressed with improved memory handling Affected: before 18.2 |
| CVE-2024-44242 | 9.8 | Dec 11 | The issue was addressed with improved bounds checks Affected: before 18.1 |
| CVE-2023-40414 | 9.8 | Jan 10 | A use-after-free issue was addressed with improved memory management Affected: before 17 |
| CVE-2023-40400 | 9.8 | Sep 26 | This issue was addressed with improved checks Affected: before 17 |
| CVE-2023-37285 | 9.8 | Jul 28 | An out-of-bounds read was addressed with improved bounds checking Affected: before 15.7 |
| CVE-2023-38598 | 9.8 | Jul 28 | A use-after-free issue was addressed with improved memory management Affected: before 16.6; before 15.7 |
| CVE-2023-38604 | 9.8 | Jul 28 | An out-of-bounds write issue was addressed with improved input validation Affected: before 16.6; before 15.7 |
| CVE-2023-36495 | 9.8 | Jul 28 | An integer overflow was addressed with improved input validation Affected: before 16.6; before 15.7 |
| CVE-2023-34425 | 9.8 | Jul 28 | The issue was addressed with improved memory handling Affected: before 16.6; before 15.7 |
| CVE-2023-32412 | 9.8 | Jun 23 | A use-after-free issue was addressed with improved memory management Affected: before 15.7; before 16.5 |
| CVE-2023-32419 | 9.8 | Jun 23 | The issue was addressed with improved bounds checks Affected: before 16.5 |
| CVE-2023-28201 | 9.8 | May 8 | This issue was addressed with improved state management Affected: before 16.4; before 15.7 |
| CVE-2023-23526 | 9.8 | May 8 | This was addressed with additional checks by Gatekeeper on files downloaded from an iCloud shared-by-me folder Affected: before 16.4 |
| CVE-2022-26760 | 9.8 | Feb 27 | A memory corruption issue was addressed with improved state management Affected: before 15.5 |
| CVE-2024-40867 | 9.6 | Oct 28 | A custom URL scheme handling issue was addressed with improved input validation Affected: before 18.1 |
| CVE-2026-64740 | 9.3 | Jul 27 | A parsing issue in the handling of directory paths was addressed with improved path validation Affected: before 18.7.10; before 26.6 |
| CVE-2026-20688 | 9.3 | Mar 25 | A path handling issue was addressed with improved validation Affected: before 26.4 |
| CVE-2024-44206 | 9.3 | Oct 24 | An issue in the handling of URL protocols was addressed with improved logic Affected: before 17.6 |
| CVE-2026-84625 | 9.1 | Sep 14 | A permissions issue was addressed with additional sandbox restrictions Affected: before 27 |
| CVE-2026-86881 | 9.1 | Sep 14 | A certificate validation issue was addressed with improved certificate validation Affected: before 26.7; before 27 |
| CVE-2026-39868 | 9.1 | Jun 29 | This issue was addressed with improved input validation Affected: before 18.7.10; before 26.5.2 |
| CVE-2025-31229 | 9.1 | Jul 29 | A logic issue was addressed with improved checks Affected: before 18.6 |
| CVE-2025-31281 | 9.1 | Jul 29 | An input validation issue was addressed with improved memory handling Affected: before 18.6 |
| CVE-2025-30436 | 9.1 | May 12 | This issue was addressed by restricting options offered on a locked device Affected: before 18.4 |
| CVE-2025-30448 | 9.1 | May 12 | This issue was addressed with additional entitlement checks Affected: before 18.5 |
| CVE-2024-54542 | 9.1 | Jan 27 | An authentication issue was addressed with improved state management Affected: before 18.2 |
| CVE-2024-54512 | 9.1 | Jan 27 | The issue was addressed by removing the relevant flags Affected: before 18.2 |
| CVE-2024-54530 | 9.1 | Jan 27 | The issue was addressed with improved checks Affected: before 18.2 |
The 500 most important CVEs for this product (exploited first, then by severity)