apple iOS and iPadOS Vulnerabilities
CVE security advisories and vulnerability history for iOS and iPadOS by apple.
Last updated
Overview
apple iOS and iPadOS has 1,576 published CVE records since 2020, of which 59 are in CISA's Known Exploited Vulnerabilities catalog and 90 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.
This page aggregates every publicly disclosed vulnerability (CVE) affecting apple iOS and iPadOS, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of apple iOS and iPadOS's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
59
59 of apple iOS and iPadOS's CVEs are confirmed exploited in the wild.
Public exploits
90
90 of apple iOS and iPadOS's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every apple iOS and iPadOS version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
- < 15.786 CVEs
- < 1774 CVEs
- < 18.474 CVEs
- < 26.162 CVEs
- < 14.561 CVEs
- < 26.560 CVEs
- < 16.756 CVEs
- < 14.454 CVEs
- < 16.449 CVEs
- < 14.648 CVEs
- < 17.548 CVEs
- < 15.247 CVEs
- < 1847 CVEs
- < 16.546 CVEs
- < 18.7.946 CVEs
- < 18.144 CVEs
- < 26.343 CVEs
- < 26.441 CVEs
- < 16.640 CVEs
- < 17.140 CVEs
- < 17.440 CVEs
- < 18.239 CVEs
- < 18.7.239 CVEs
- < 17.637 CVEs
- < 18.337 CVEs
- < 26.5.237 CVEs
- < 18.536 CVEs
- < 1535 CVEs
- < 15.435 CVEs
- < 18.7.535 CVEs
- < 2635 CVEs
- < 26.235 CVEs
- < 14.230 CVEs
- < 14.029 CVEs
- < 18.628 CVEs
- < 16.7.925 CVEs
- < 16.7.824 CVEs
- < 18.7.724 CVEs
- < 15.123 CVEs
- < 16.323 CVEs
- < 17.7.123 CVEs
- < 17.222 CVEs
- < 14.820 CVEs
- < 17.320 CVEs
- < 18.7.319 CVEs
- < 16.7.618 CVEs
- < 17.718 CVEs
- < 13.317 CVEs
- < 14.316 CVEs
- < 13.114 CVEs
- < 18.714 CVEs
- < 16.211 CVEs
- < 15.310 CVEs
- < 16.19 CVEs
- < 16.7.57 CVEs
- < 15.65 CVEs
- < 15.04 CVEs
- < 15.54 CVEs
- < 15.8.74 CVEs
- < 13.23 CVEs
- < 15.8.43 CVEs
- < 16.7.113 CVEs
- < 13.62 CVEs
- < 17.7.22 CVEs
- < 18.0.12 CVEs
- < 18.1.12 CVEs
- < 18.3.12 CVEs
- < 18.4.12 CVEs
- < 15.8.51 CVE
- < 15.8.81 CVE
- < 16.7.121 CVE
- < 16.7.151 CVE
- < 16.7.161 CVE
- < 18.3.21 CVE
- < 18.6.21 CVE
- < 18.7.11 CVE
- < 18.7.81 CVE
- < 26.0.11 CVE
- < 26.3.1 (a)1 CVE
- < 26.4.21 CVE
Fixed in
- 15.786 CVEs
- 1774 CVEs
- 18.474 CVEs
- 26.162 CVEs
- 14.561 CVEs
- 26.560 CVEs
- 16.756 CVEs
- 14.454 CVEs
- 16.449 CVEs
- 14.648 CVEs
- 17.548 CVEs
- 15.247 CVEs
- 1847 CVEs
- 16.546 CVEs
- 18.7.946 CVEs
- 18.144 CVEs
- 26.343 CVEs
- 26.441 CVEs
- 16.640 CVEs
- 17.140 CVEs
- 17.440 CVEs
- 18.239 CVEs
- 18.7.239 CVEs
- 17.637 CVEs
- 18.337 CVEs
- 26.5.237 CVEs
- 18.536 CVEs
- 1535 CVEs
- 15.435 CVEs
- 18.7.535 CVEs
- 2635 CVEs
- 26.235 CVEs
- 14.230 CVEs
- 14.029 CVEs
- 18.628 CVEs
- 16.7.925 CVEs
- 16.7.824 CVEs
- 18.7.724 CVEs
- 15.123 CVEs
- 16.323 CVEs
- 17.7.123 CVEs
- 17.222 CVEs
- 14.820 CVEs
- 17.320 CVEs
- 18.7.319 CVEs
- 16.7.618 CVEs
- 17.718 CVEs
- 13.317 CVEs
- 14.316 CVEs
- 13.114 CVEs
- 18.714 CVEs
- 16.211 CVEs
- 15.310 CVEs
- 16.19 CVEs
- 16.7.57 CVEs
- 15.65 CVEs
- 15.04 CVEs
- 15.54 CVEs
- 15.8.74 CVEs
- 13.23 CVEs
- 15.8.43 CVEs
- 16.7.113 CVEs
- 13.62 CVEs
- 17.7.22 CVEs
- 18.0.12 CVEs
- 18.1.12 CVEs
- 18.3.12 CVEs
- 18.4.12 CVEs
- 15.8.51 CVE
- 15.8.81 CVE
- 16.7.121 CVE
- 16.7.151 CVE
- 16.7.161 CVE
- 18.3.21 CVE
- 18.6.21 CVE
- 18.7.11 CVE
- 18.7.81 CVE
- 26.0.11 CVE
- 26.3.1 (a)1 CVE
- 26.4.21 CVE
1,576 CVEs
- Medium · CVSS 6.5EPSS 0.2% (12th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.6% (45th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.5% (39th pct)2026-06-29
- Critical · CVSS 9.1EPSS 0.7% (48th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.4% (32th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.2% (13th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.2% (12th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (25th pct)2026-06-29
- High · CVSS 7.1EPSS 0.5% (38th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.2% (13th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.2% (12th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (20th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (24th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.6% (46th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (24th pct)2026-06-29
- High · CVSS 8.8EPSS 0.2% (14th pct)2026-06-29
- High · CVSS 7.8EPSS 0.3% (21th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.4% (32th pct)2026-06-29
- Medium · CVSS 4.3EPSS 0.3% (25th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (25th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.6% (45th pct)2026-06-29
- Medium · CVSS 5.3EPSS 0.3% (27th pct)2026-06-29
- High · CVSS 8.8EPSS 0.4% (33th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.4% (35th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (17th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (17th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.4% (28th pct)2026-06-29
- High · CVSS 7.1EPSS 0.8% (52th pct)2026-06-29
- Medium · CVSS 4.7EPSS 0.1% (1th pct)2026-06-29
- Medium · CVSS 5.5EPSS 0.2% (14th pct)2026-06-29
Showing 30 of 1,576
Common weakness types
The CWE weakness categories most often found in apple iOS and iPadOS CVEs. Follow any weakness for its full explanation.
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor83 CVEs
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer75 CVEs
- CWE-125Out-of-bounds Read66 CVEs
- CWE-787Out-of-bounds Write63 CVEs
- CWE-284Improper Access Control60 CVEs
- CWE-416Use After Free58 CVEs
- CWE-20Improper Input Validation34 CVEs
- CWE-400Uncontrolled Resource Consumption32 CVEs
Disclosure activity by year
How many apple iOS and iPadOS CVEs were published each year.
Other apple products
Browse vulnerabilities for other products by apple.
Frequently asked questions
Common questions about apple iOS and iPadOS vulnerabilities.
- How many CVEs does apple iOS and iPadOS have?
- apple iOS and iPadOS has 1,576 published CVE records since 2020.
- How many apple iOS and iPadOS CVEs are in CISA KEV?
- Yes — 59 of apple iOS and iPadOS's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Are there public exploits for apple iOS and iPadOS vulnerabilities?
- Yes — 90 of apple iOS and iPadOS's CVEs have a known public exploit.
- Which versions of apple iOS and iPadOS are affected?
- 160 distinct apple iOS and iPadOS versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
- What are the most common weakness types in apple iOS and iPadOS CVEs?
- apple iOS and iPadOS's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write).
- How many critical apple iOS and iPadOS vulnerabilities are there?
- apple iOS and iPadOS has 98 critical and 646 high-severity CVEs.
- What is the average severity of apple iOS and iPadOS CVEs?
- The average CVSS base score across apple iOS and iPadOS's scored CVEs is 6.6.
References
- All apple vulnerabilities
- The MITRE CVE Program (opens in a new tab)
- Learn: What is a CVE?
- CWE directory: the weakness types these CVEs map to
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Track apple iOS and iPadOS vulnerabilities
Monitor new apple iOS and iPadOS vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.