Skip to content
OpenAdvisories

Platform

iOS

3,637 known vulnerabilities.

124 results · Clear filters · Feed

  • High 7.8
    CVE-2020-9859 Exploited

    A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-3837 Exploited Public exploit EPSS 15%

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.…

    KEV Jun 27, 2022
  • High 8.8
    CVE-2020-3118 Exploited EPSS 12%

    Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability

    A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of st…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2019-8605 Exploited Public exploit EPSS 18%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.…

    KEV Jun 27, 2022
  • High 7.8
    CVE-2019-7286 Exploited Public exploit EPSS 16%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave…

    KEV May 23, 2022
  • High 8.8
    CVE-2019-8506 Exploited Public exploit EPSS 16%

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…

    KEV May 4, 2022
  • High 7.8
    CVE-2019-7287 Exploited

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An applicati…

    KEV May 23, 2022
  • Critical 9.8
    CVE-2019-3568 Exploited EPSS 30%

    A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RT…

    KEV Apr 19, 2022
  • High 7.8
    CVE-2018-4344 Exploited

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, ma…

    KEV Jun 27, 2022
  • High 7.5
    CVE-2019-6223 Exploited

    A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. …

    KEV Nov 3, 2021
  • High 7.5
    CVE-2018-0156 Exploited

    A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0158 Exploited

    A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software c…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-0154 Exploited

    A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Softwa…

    iOS
    KEV Mar 3, 2022
  • High 8.0
    CVE-2018-0175 Exploited

    Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE S…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0172 Exploited

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0155 Exploited

    A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Sw…

    iOS
    KEV Mar 3, 2022
  • Medium 6.3
    CVE-2018-0161 Exploited

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain mod…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-0171 Exploited Public exploit Scanner template EPSS 99%

    A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic…

    iOS
    KEV Nov 3, 2021
  • High 8.6
    CVE-2018-0174 Exploited

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

    iOS
    KEV Mar 3, 2022
  • Medium 6.8
    CVE-2018-0179 Exploited

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthent…

    iOS
    KEV Mar 3, 2022
  • Medium 6.8
    CVE-2018-0180 Exploited

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthent…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-0159 Exploited

    A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software an…

    iOS
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2018-0151 Exploited EPSS 14%

    A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow a…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0173 Exploited

    A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 infor…

    iOS
    KEV Mar 3, 2022
  • High 8.8
    CVE-2018-0167 Exploited

    Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, C…

    iOS
    KEV Mar 3, 2022
  • Medium 5.9
    CVE-2017-12319 Exploited

    A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE S…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12231 Exploited

    A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12234 Exploited

    Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 throug…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12233 Exploited

    Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 throug…

    iOS
    KEV Mar 3, 2022
  • Medium 6.5
    CVE-2017-12232 Exploited

    A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers …

    iOS
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2017-12240 Exploited EPSS 14%

    The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could a…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12237 Exploited

    A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3…

    iOS
    KEV Mar 3, 2022
  • Medium 6.5
    CVE-2017-12238 Exploited

    A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 S…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12235 Exploited

    A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 …

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-6627 Exploited

    A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow a…

    iOS
    KEV Mar 3, 2022
  • Medium 6.5
    CVE-2017-6663 Exploited

    A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unau…

    iOS
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6740 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6743 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6744 Exploited

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6737 Exploited EPSS 45%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    KEV Mar 3, 2022