iOS

16 results · Clear filters · Feed

• Critical 9.8
  CVE-2026-94541 Public exploit

  WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter

  The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes i…

  amauric WPMobile.App – Android and iOS App Builder Android iOS Web / CMS
  Oct 2, 2026
• Critical 9.3
  CVE-2026-103922 Public exploit

  Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

  Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates …

  swift com.capacitorjs ionic-team @capacitor Android iOS npm Maven SwiftURL
  Oct 1, 2026
• Critical 9.1
  CVE-2026-86881 Public exploit

  A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and …

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Sep 14, 2026
• Critical 9.8
  CVE-2026-13447 Public exploit

  MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery

  The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verify_id_token() function, which d…

  inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS
  Sep 5, 2026
• Critical 9.8
  CVE-2026-43805 Public exploit

  A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Seq…

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Jul 27, 2026
• Critical 9.8
  CVE-2026-28858 Public exploit

  A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remot…

  Apple iOS and iPadOS iOS
  Mar 25, 2026
• Critical 10.0
  CVE-2025-43300 Exploited Public exploit EPSS 65%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS …

  Apple macOS iOS and iPadOS iPadOS macOS iOS
  Aug 21, 2025

  KEV Aug 21, 2025
• Critical 9.8
  CVE-2025-31200 Exploited Public exploit EPSS 21%

  A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.…

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Apr 16, 2025

  KEV Apr 17, 2025
• Critical 10.0
  CVE-2025-24201 Exploited Public exploit

  An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Alpine
  Mar 11, 2025

  KEV Mar 13, 2025
• Critical 9.1
  CVE-2024-54507 Public exploit

  A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, ma…

  Apple macOS iOS and iPadOS macOS iOS
  Jan 27, 2025
• Critical 9.8
  CVE-2025-24118 Public exploit

  The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS …

  Apple macOS iPadOS macOS iOS
  Jan 27, 2025
• Critical 10.0
  CVE-2025-24085 Exploited Public exploit EPSS 17%

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, …

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Jan 27, 2025

  KEV Jan 29, 2025
• Critical 10.0
  CVE-2023-20198 Exploited Public exploit EPSS 100%

  Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IO…

  Cisco Cisco IOS XE Software iOS Network devices
  Oct 16, 2023

  KEV Oct 16, 2023
• Critical 9.8
  CVE-2023-2732 Public exploit EPSS 67%

  MStore API <= 3.9.2 - Authentication Bypass

  The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.2. This is due to insufficient verification on the user being supplied during the add listing REST API request through the plugin. This makes it p…

  inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS
  May 25, 2023
• Critical 9.8
  CVE-2022-36934 Public exploit

  An integer overflow in WhatsApp could result in remote code execution in an established video call.

  Meta WhatsApp Business for iOS WhatsApp for Android WhatsApp for iOS Android iOS
  Sep 22, 2022
• Critical 9.8
  CVE-2017-3881 Exploited Public exploit EPSS 99%

  A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software c…

  iOS
  Mar 17, 2017

  KEV Mar 25, 2022