Apple iPhone

productDE

cpe:/h:apple:iphone:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical27high15medium0low

updated 2026-10-27

vulnerabilities (42)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-30952US	high7.8OT critical	6.96% (94th)	KEV	no fix	2021-08-24	—
CVE-2021-30983US	high7.8OT critical	2.92% (87th)	KEV	no fix	2021-08-24	—
CVE-2021-30937US	high7.8	17.3% (97th)	Exploit	no fix	2021-08-24	—
CVE-2021-30955US	high7.0	4.79% (92nd)	Exploit	no fix	2021-08-24	—
CVE-2021-30939US	high7.8	4.05% (91st)	—	no fix	2021-08-24	—
CVE-2021-30934US	high8.8	2.64% (85th)	—	no fix	2021-08-24	—
CVE-2021-30995US	high7.0	2.36% (84th)	—	no fix	2021-08-24	—
CVE-2021-30993US	high8.1	2.34% (84th)	—	no fix	2021-08-24	—
CVE-2021-30949US	high7.8	2.08% (81st)	—	no fix	2021-08-24	—
CVE-2021-30951US	high8.8	2.02% (81st)	—	no fix	2021-08-24	—
CVE-2021-30936US	high8.8	1.99% (81st)	—	no fix	2021-08-24	—
CVE-2021-30953US	high8.8	1.95% (80th)	—	no fix	2021-08-24	—
CVE-2021-30984US	high7.5	1.67% (77th)	—	no fix	2021-08-24	—
CVE-2021-30979US	high7.8	1.56% (75th)	—	no fix	2021-08-24	—
CVE-2021-30942US	high7.8	1.51% (74th)	—	no fix	2021-08-24	—
CVE-2021-30966US	high7.5	1.50% (74th)	—	no fix	2021-08-24	—
CVE-2021-30954US	high7.8	1.45% (73rd)	—	no fix	2021-08-24	—
CVE-2021-30980US	high7.8	1.42% (73rd)	—	no fix	2021-08-24	—
CVE-2021-30926US	high7.8	1.32% (71st)	—	no fix	2021-08-24	—
CVE-2021-30957US	high7.8	1.32% (71st)	—	no fix	2021-08-24	—
CVE-2021-30971US	high7.8	1.27% (70th)	—	no fix	2021-08-24	—
CVE-2021-30958US	high7.8	1.14% (66th)	—	no fix	2021-08-24	—
CVE-2021-30991US	high7.8	1.07% (65th)	—	no fix	2021-08-24	—
CVE-2021-30985US	high7.8	1.07% (65th)	—	no fix	2021-08-24	—
CVE-2021-30968US	medium5.5	1.06% (64th)	—	no fix	2021-08-24	—
CVE-2021-30960US	medium5.5	1.01% (63rd)	—	no fix	2021-08-24	—
CVE-2021-30941US	medium5.5	0.96% (61st)	—	no fix	2021-08-24	—
CVE-2021-30940US	medium5.5	0.96% (61st)	—	no fix	2021-08-24	—
CVE-2021-30946US	medium5.5	0.90% (59th)	—	no fix	2021-08-24	—
CVE-2021-30973US	medium5.5	0.87% (58th)	—	no fix	2021-08-24	—
CVE-2021-30947US	medium5.5	0.87% (58th)	—	no fix	2021-08-24	—
CVE-2021-30964US	medium5.5	0.84% (58th)	—	no fix	2021-08-24	—
CVE-2021-30996US	high7.0	0.81% (57th)	—	no fix	2021-08-24	—
CVE-2021-30988US	medium5.5	0.72% (54th)	—	no fix	2021-08-24	—
CVE-2021-30927US	high7.8	0.35% (28th)	—	no fix	2021-08-24	—
CVE-2021-30932US	medium4.6	0.32% (25th)	—	no fix	2021-08-24	—
CVE-2021-30945US	high7.8	0.31% (23rd)	—	no fix	2021-08-24	—
CVE-2021-30929US	medium5.5	0.30% (23rd)	—	no fix	2021-08-24	—
CVE-2021-30948US	medium4.6	0.30% (22nd)	—	no fix	2021-08-24	—
CVE-2021-30992US	medium5.5	0.29% (22nd)	—	no fix	2021-08-24	—
CVE-2021-30767US	medium5.5OT elevated	0.28% (20th)	—	no fix	2021-12-23	—
CVE-2021-30967US	medium5.5	0.26% (18th)	—	no fix	2021-08-24	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')8 CVEs
CWE-787Out-of-bounds Write7 CVEs
CWE-125Out-of-bounds Read5 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')4 CVEs
CWE-416Use After Free4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)42 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan