iPhone OS

productNL

cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical4high5medium0low

updated 2026-10-27

vulnerabilities (72)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-24085US	critical10.0OT critical	17.5% (97th)	KEV	no fix	2025-01-27	≤ vers:unknown/18.0
CVE-2025-24201US	critical10.0OT critical	3.85% (90th)	KEV	no fix	2025-03-11	≤ vers:unknown/18.0
CVE-2025-24200US	medium6.1OT critical	4.46% (91st)	KEV	no fix	2025-02-10	≤ vers:unknown/18.0
CVE-2025-30456US	—	1.00% (63rd)	Exploit	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24203US	—	0.64% (50th)	Exploit	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24257US	—	0.31% (23rd)	Exploit	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2024-54502US	medium6.5	17.1% (97th)	—	no fix	2024-12-12	≤ vers:unknown/18.0
CVE-2024-9681US	medium6.5	1.99% (81st)	—	no fix	2024-11-06	≤ vers:unknown/18.0
CVE-2025-24230US	—	1.92% (80th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24211US	—	1.92% (80th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24190US	—	1.92% (80th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24237US	—	1.64% (76th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24178US	—	1.60% (76th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-30471US	—	1.50% (74th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-30433US	—	1.29% (70th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-31182US	—OT elevated	1.26% (69th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-31183US	—	1.23% (69th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-30426US	—	1.23% (69th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-30430US	—	1.19% (68th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2024-56171US	critical9.8	1.18% (67th)	—	no fix	2025-02-18	≤ vers:unknown/18.0
CVE-2025-24238US	—OT elevated	1.14% (67th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-30465US	—OT elevated	1.08% (65th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-27113US	high7.5	1.05% (64th)	—	no fix	2025-02-18	≤ vers:unknown/18.0
CVE-2024-54534US	critical9.8	1.04% (64th)	—	no fix	2024-12-12	≤ vers:unknown/18.0
CVE-2025-24180US	—	1.04% (64th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2024-54508US	high7.5	0.97% (62nd)	—	no fix	2024-12-12	≤ vers:unknown/18.0
CVE-2025-24167US	—	0.94% (61st)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24264US	—	0.94% (61st)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24209US	—	0.90% (60th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24221US	—OT elevated	0.87% (59th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-30432US	—	0.85% (58th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-30427US	—	0.83% (57th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-30425US	—	0.82% (57th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24216US	—	0.81% (57th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2024-54543US	high8.8	0.81% (57th)	—	no fix	2025-01-27	≤ vers:unknown/18.0
CVE-2025-24113US	medium4.3	0.80% (56th)	—	no fix	2025-01-27	≤ vers:unknown/18.0
CVE-2025-24192US	—	0.78% (56th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24194US	—OT elevated	0.74% (54th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24095US	—OT elevated	0.66% (52nd)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-31192US	—	0.59% (48th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24208US	—	0.58% (48th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2024-48958US	high7.8	0.55% (46th)	—	no fix	2024-10-10	≤ vers:unknown/18.0
CVE-2025-30467US	—	0.54% (45th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24243US	—	0.52% (44th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24193US	—	0.50% (42nd)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-31191US	—	0.47% (40th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24198US	—	0.45% (39th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-24163US	medium5.5	0.44% (38th)	—	no fix	2025-01-27	≤ vers:unknown/18.0
CVE-2025-24213US	—	0.43% (37th)	—	no fix	2025-03-31	≤ vers:unknown/18.0
CVE-2025-30439US	—	0.41% (35th)	—	no fix	2025-03-31	≤ vers:unknown/18.0

showing 50 of 72

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control12 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor11 CVEs
CWE-125Out-of-bounds Read6 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-276Incorrect Default Permissions4 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)72 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan