Platform

iOS

3,624 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

202 results · Clear filters · Feed

High 7.5

CVE-2026-112621 Public exploit

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
Medium 5.5

CVE-2026-112705 Public exploit

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS …

Apple macOS iOS and iPadOS tvOS macOS iOS

Oct 26, 2026
High 8.8

CVE-2026-112688 Public exploit

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7,…

Apple macOS iOS and iPadOS macOS iOS

Oct 26, 2026
Medium 6.1

CVE-2026-112611 Public exploit

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS …

Apple macOS iOS and iPadOS macOS iOS

Oct 26, 2026
High 8.4

CVE-2026-112689 Public exploit

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS…

Apple macOS iOS and iPadOS tvOS macOS iOS

Oct 26, 2026
Medium 5.5

CVE-2026-112706 Public exploit

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iO…

Apple iOS and iPadOS watchOS tvOS iOS

Oct 26, 2026
Medium 5.5

CVE-2026-86962 Public exploit

A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS…

Apple macOS iOS and iPadOS watchOS macOS iOS

Oct 20, 2026
Critical 9.8

CVE-2026-94541 Public exploit

WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter

The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes i…

amauric WPMobile.App – Android and iOS App Builder Android iOS Web / CMS

Oct 2, 2026
Critical 9.3

CVE-2026-103922 Public exploit

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates …

swift com.capacitorjs ionic-team @capacitor Android iOS npm Maven SwiftURL

Oct 1, 2026
High 8.8

CVE-2026-86950 Exploited Public exploit EPSS 26%

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS…

Apple macOS iOS and iPadOS macOS iOS

Sep 28, 2026
KEV Sep 29, 2026
Medium 5.5

CVE-2026-43664 Public exploit

This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPa…

Apple macOS iOS and iPadOS watchOS macOS iOS

Sep 14, 2026
Medium 6.5

CVE-2026-43687 Public exploit

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPad…

Apple macOS iOS and iPadOS watchOS macOS iOS

Sep 14, 2026
Medium 5.5

CVE-2026-84636 Public exploit

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS …

Apple iOS and iPadOS watchOS tvOS iOS

Sep 14, 2026
Medium 5.4

CVE-2026-84600 Public exploit

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS…

Apple macOS iOS and iPadOS watchOS macOS iOS

Sep 14, 2026
Medium 5.5

CVE-2026-84616 Public exploit

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iO…

Apple macOS iOS and iPadOS watchOS macOS iOS

Sep 14, 2026
Critical 9.1

CVE-2026-86881 Public exploit

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and …

Apple macOS iOS and iPadOS watchOS macOS iOS

Sep 14, 2026
Critical 9.8

CVE-2026-13447 Public exploit

MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery

The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verify_id_token() function, which d…

inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS

Sep 5, 2026
Medium 5.5

CVE-2026-64705 Public exploit

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS S…

Apple macOS iOS and iPadOS macOS iOS

Aug 25, 2026
Medium 4.3

CVE-2026-65351 Public exploit

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadO…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian

Aug 17, 2026
Medium 6.5

CVE-2026-65330 Public exploit

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequo…

Apple macOS iOS and iPadOS watchOS macOS iOS

Aug 17, 2026
Medium 5.4

CVE-2026-64788 Public exploit

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe…

Apple macOS iOS and iPadOS watchOS macOS iOS

Aug 17, 2026
High 7.5

CVE-2026-65343 Public exploit

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6…

Apple macOS iOS and iPadOS watchOS macOS iOS

Aug 17, 2026
Medium 6.6

CVE-2026-65349 Public exploit

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1…

Apple macOS iOS and iPadOS watchOS macOS iOS

Aug 17, 2026
Critical 9.8

CVE-2026-43805 Public exploit

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Seq…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 27, 2026
High 7.1

CVE-2026-43813 Public exploit

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, mac…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 27, 2026
High 7.8

CVE-2026-64747 Public exploit

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, i…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 27, 2026
High 7.1

CVE-2026-64725 Public exploit

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 27, 2026
Medium 6.5

CVE-2026-43700 Public exploit

A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iO…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Jun 29, 2026
High 7.8

CVE-2026-43724 Public exploit

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jun 29, 2026
High 8.1

CVE-2026-43735 Public exploit

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Jun 29, 2026
High 8.8

CVE-2026-28995 Public exploit

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 a…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 11, 2026
Medium 6.5

CVE-2026-28956 Public exploit

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 11, 2026
High 7.3

CVE-2026-43655 Public exploit

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, mac…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 11, 2026
Medium 4.7

CVE-2026-28992 Public exploit

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.9 and iPadOS 18.…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 11, 2026
High 7.5

CVE-2026-28990 Public exploit

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 …

Apple macOS iOS and iPadOS watchOS macOS iOS

May 11, 2026
High 7.1

CVE-2026-20687 Public exploit

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7…

Apple macOS iOS and iPadOS watchOS macOS iOS

Mar 25, 2026
Critical 9.8

CVE-2026-28858 Public exploit

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remot…

Apple iOS and iPadOS iOS

Mar 25, 2026
Medium 6.2

CVE-2026-20637 Public exploit

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7…

Apple macOS iOS and iPadOS watchOS macOS iOS

Mar 25, 2026
Medium 5.5

CVE-2026-20698 Public exploit

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.…

Apple macOS iOS and iPadOS watchOS macOS iOS

Mar 25, 2026
Medium 6.2

CVE-2026-28867 Public exploit

This issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 an…

Apple macOS iOS and iPadOS watchOS macOS iOS

Mar 25, 2026