Apple iOS <18.4

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical0high0medium0low

updated 2026-10-27

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-24252US	—	1.30% (70th)	Exploit	no fix	2025-04-29	—
CVE-2025-24271US	—OT elevated	0.51% (43rd)	Exploit	no fix	2025-04-29	—
CVE-2025-24221US	—OT elevated	0.87% (59th)	—	no fix	2025-03-31	—
CVE-2025-24095US	—OT elevated	0.66% (52nd)	—	no fix	2025-03-31	—
CVE-2025-24193US	—	0.50% (42nd)	—	no fix	2025-03-31	—
CVE-2025-30436US	—	0.49% (42nd)	—	no fix	2025-05-12	—
CVE-2025-24206US	—OT elevated	0.36% (30th)	—	no fix	2025-04-29	—
CVE-2025-30428US	—	0.35% (28th)	—	no fix	2025-03-31	—
CVE-2025-30469US	—OT elevated	0.27% (19th)	—	no fix	2025-03-31	—
CVE-2025-30434US	—	0.27% (19th)	—	no fix	2025-03-31	—

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control3 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-305Authentication Bypass by Primary Weakness1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-416Use After Free1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.