Apple IOS

Name: Apple IOS
Brand: Apple

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

52critical472high382medium73low

updated 2026-10-26

vulnerabilities (1,807)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-30860US	high7.8OT critical	76.0% (100th)	KEV	14.8	2021-08-24	unspecified → 14.8
CVE-2025-43300US	—OT critical	65.2% (99th)	KEV	16.7.12	2025-08-21	4 versions
CVE-2025-14174US	—OT critical	55.3% (99th)	KEV	no fix	2025-12-12	≤ vers:unknown/*
CVE-2026-86950US	—OT critical	26.2% (98th)	KEV	26.7.1	2026-09-28	< 26.7.1
CVE-2025-43529US	—OT critical	25.7% (98th)	KEV	no fix	2025-12-17	≤ vers:unknown/*
CVE-2025-31200US	—OT critical	20.9% (98th)	KEV	18.4.1	2025-04-16	2 versions
CVE-2019-8605US	high7.8OT critical	17.6% (97th)	KEV	iOS 12.3	2019-12-18	unspecified → iOS 12.3
CVE-2025-24085US	critical10.0OT critical	17.5% (97th)	KEV	no fix	2025-01-27	10 versions
CVE-2019-8506US	high8.8OT critical	16.2% (97th)	KEV	iOS 12.2	2019-12-18	unspecified → iOS 12.2
CVE-2019-7286US	high7.8OT critical	15.9% (97th)	KEV	iOS 12.1.4	2019-12-18	unspecified → iOS 12.1.4
CVE-2020-3837US	high7.8OT critical	14.8% (97th)	KEV	iOS 13.3.1 and iPadOS 13.3.1	2020-02-27	unspecified → iOS 13.3.1 and iPadOS 13.3.1
CVE-2023-41991US	medium5.5OT critical	13.4% (96th)	KEV	16.7	2023-09-21	2 versions
CVE-2021-30858US	high8.8OT critical	13.4% (96th)	KEV	14.8	2021-08-24	unspecified → 14.8
CVE-2025-6558US	—OT critical	10.9% (96th)	KEV	no fix	2025-07-15	≤ vers:apple/18.6
CVE-2024-23222US	high8.8OT critical	10.6% (96th)	KEV	15.8.7	2024-01-23	2 versions
CVE-2023-41992US	high7.8OT critical	9.52% (95th)	KEV	16.7	2023-09-21	2 versions
CVE-2025-24201US	critical10.0OT critical	3.85% (90th)	KEV	16.7.11	2025-03-11	13 versions
CVE-2020-9934US	medium5.5OT critical	3.21% (88th)	KEV	iOS 13.6 and iPadOS 13.6	2020-10-16	unspecified → iOS 13.6 and iPadOS 13.6
CVE-2026-65400US	—OT critical	1.72% (77th)	KEV	27	2026-08-06	2 versions
CVE-2026-20700US	—OT critical	1.68% (77th)	KEV	no fix	2026-02-11	≤ vers:unknown/*
CVE-2025-31277US	—OT critical	1.66% (76th)	KEV	no fix	2025-07-30	≤ vers:apple/18.6
CVE-2022-2294US	high8.8OT critical	70.8% (99th)	KEV	15.6	2022-07-28	< 15.6
CVE-2023-42916US	medium6.5OT critical	17.8% (97th)	KEV	15.8.1	2023-11-30	< 15.8.1
CVE-2025-31201US	—OT critical	13.9% (97th)	KEV	18.4.1	2025-04-16	2 versions
CVE-2021-30762US	high8.8OT critical	11.0% (96th)	KEV	12.5	2021-09-08	unspecified → 12.5
CVE-2021-30761US	high8.8OT critical	10.5% (96th)	KEV	12.5	2021-09-08	unspecified → 12.5
CVE-2022-42856US	high8.8OT critical	8.52% (95th)	KEV	12.5.7	2022-12-15	< 12.5.7
CVE-2021-1879US	medium6.1OT critical	7.08% (94th)	KEV	12.5	2021-04-02	unspecified → 12.5
CVE-2021-30952US	high7.8OT critical	6.96% (94th)	KEV	15.2	2021-08-24	< 15.2
CVE-2022-32917US	high7.8OT critical	5.60% (93rd)	KEV	16	2022-09-20	unspecified → 16
CVE-2019-7287US	high7.8OT critical	4.58% (92nd)	KEV	iOS 12.1.4	2019-12-18	unspecified → iOS 12.1.4
CVE-2025-24200US	medium6.1OT critical	4.46% (91st)	KEV	15.8.4	2025-02-10	13 versions
CVE-2023-43000US	high8.8OT critical	4.04% (91st)	KEV	15.8.7	2025-11-05	2 versions
CVE-2022-48503US	high8.8OT critical	3.21% (88th)	KEV	15.6	2023-08-14	< 15.6
CVE-2020-9907US	high7.8OT critical	3.20% (88th)	KEV	iOS 13.6 and iPadOS 13.6	2020-10-16	unspecified → iOS 13.6 and iPadOS 13.6
CVE-2021-30666US	high8.8OT critical	3.00% (87th)	KEV	12.5	2021-09-08	unspecified → 12.5
CVE-2021-30983US	high7.8OT critical	2.92% (87th)	KEV	15.2	2021-08-24	< 15.2
CVE-2019-6223US	high7.5OT critical	2.63% (85th)	KEV	iOS 12.1.3	2019-03-05	unspecified → iOS 12.1.3
CVE-2020-9818US	high8.8OT critical	2.34% (84th)	KEV	iOS 13.5 and iPadOS 13.5	2020-06-09	unspecified → iOS 13.5 and iPadOS 13.5
CVE-2020-9819US	medium4.3OT critical	2.23% (83rd)	KEV	iOS 13.5 and iPadOS 13.5	2020-06-09	unspecified → iOS 13.5 and iPadOS 13.5
CVE-2023-41974US	high7.8OT critical	1.96% (80th)	KEV	16.7	2024-01-10	4 versions
CVE-2025-43200US	—OT critical	1.19% (68th)	KEV	15.8.4	2025-06-16	3 versions
CVE-2020-9859US	high7.8OT critical	0.83% (57th)	KEV	iOS 13.5.1 and iPadOS 13.5.1	2020-06-05	unspecified → iOS 13.5.1 and iPadOS 13.5.1
CVE-2022-48618US	high7.0OT critical	0.49% (42nd)	KEV	12.5.7	2024-01-09	< 12.5.7
CVE-2020-9850US	critical9.8	77.4% (100th)	Exploit	iOS 13.5 and iPadOS 13.5	2020-06-09	unspecified → iOS 13.5 and iPadOS 13.5
CVE-2025-6965US	high7.7	73.5% (99th)	Exploit	no fix	2025-07-15	≤ vers:unknown/*
CVE-2022-46689US	high7.0	48.2% (99th)	Exploit	12.5.7	2022-12-15	< 12.5.7
CVE-2025-43541US	—	34.1% (98th)	Exploit	18.7.3	2025-12-17	2 versions
CVE-2019-6225US	high7.8	28.8% (98th)	Exploit	iOS 12.1.3	2019-03-05	unspecified → iOS 12.1.3
CVE-2021-30937US	high7.8	17.3% (97th)	Exploit	15.2	2021-08-24	< 15.2

showing 50 of 1,807

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write298 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor196 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer195 CVEs
CWE-125Out-of-bounds Read143 CVEs
CWE-20Improper Input Validation118 CVEs
CWE-284Improper Access Control113 CVEs
CWE-416Use After Free112 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')77 CVEs

sources (3)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)953 CVEs
NLNCSC-NL (CSAF)694 CVEs
EUEU Vulnerability Database (ENISA)478 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan