apple / iphone_os
402 known vulnerabilities in apple iphone_os.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-64713 | Medium | 0.5% | 8.1 | This issue was addressed with improved checks. This issue is fixed in Safari 26.… | |
| CVE-2026-64720 | Medium | 0.5% | 9.8 | A race condition was addressed with improved state handling. This issue is fixed… | |
| CVE-2026-28931 | Medium | 0.4% | 8.8 | A buffer overflow was addressed with improved bounds checking. This issue is fix… | |
| CVE-2026-65343 | Medium | 0.4% | 7.5 | A use after free issue was addressed with improved memory management. This issue… | |
| CVE-2026-34711 | Medium | 0.4% | 7.5 | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are af… | |
| CVE-2026-64783 | Medium | 0.4% | 8.8 | A use-after-free issue was addressed with improved memory management. This issue… | |
| CVE-2026-64719 | Medium | 0.4% | 8.1 | An out-of-bounds access issue was addressed with improved bounds checking. This … | |
| CVE-2026-43805 | Medium | 0.4% | 9.8 | A race condition was addressed with improved state handling. This issue is fixed… | |
| CVE-2026-43731 | Medium | 0.4% | 8.8 | A use-after-free issue was addressed with improved memory management. This issue… | |
| CVE-2026-28960 | Medium | 0.4% | 7.5 | A denial-of-service issue was addressed with improved validation. This issue is … | |
| CVE-2026-65390 | Medium | 0.4% | 8.8 | An integer overflow was addressed with improved input validation. This issue is … | |
| CVE-2026-65391 | Medium | 0.4% | 8.8 | An out-of-bounds write issue was addressed with improved bounds checking. This i… | |
| CVE-2026-84629 | Medium | 0.4% | 7.5 | This issue was addressed with additional entitlement checks. This issue is fixed… | |
| CVE-2026-87609 | Medium | 0.4% | 9.6 | Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allo… | |
| CVE-2026-65346 | Medium | 0.4% | 8.8 | An integer overflow was addressed with improved input validation. This issue is … | |
| CVE-2026-65410 | Medium | 0.4% | 7.5 | The issue was addressed with improved checks. This issue is fixed in iOS 26.7 an… | |
| CVE-2026-28935 | Medium | 0.4% | 7.5 | The issue was addressed with improved memory handling. This issue is fixed in iO… | |
| CVE-2026-28947 | Medium | 0.4% | 8.8 | A use-after-free issue was addressed with improved memory management. This issue… | |
| CVE-2026-43794 | Medium | 0.4% | 8.8 | A memory corruption issue was addressed with improved memory handling. This issu… | |
| CVE-2026-84598 | Medium | 0.4% | 7.5 | A path traversal issue was addressed with improved path validation. This issue i… | |
| CVE-2026-10885 | Medium | 0.4% | 8.8 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 … | |
| CVE-2026-10896 | Medium | 0.4% | 8.8 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 … | |
| CVE-2026-43686 | Medium | 0.4% | 8.8 | A use-after-free issue was addressed with improved memory management. This issue… | |
| CVE-2026-10958 | Medium | 0.4% | 8.8 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 … | |
| CVE-2026-34691 | Medium | 0.4% | 9.3 | Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are af… | |
| CVE-2026-28990 | Medium | 0.3% | 7.5 | The issue was addressed with improved memory handling. This issue is fixed in iO… | |
| CVE-2026-64725 | Medium | 0.3% | 7.1 | An out-of-bounds write issue was addressed with improved bounds checking. This i… | |
| CVE-2026-17967 | Medium | 0.3% | 8.8 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 … | |
| CVE-2026-43735 | Medium | 0.3% | 8.1 | The issue was addressed with improved checks. This issue is fixed in Safari 26.5… | |
| CVE-2026-85047 | Medium | 0.3% | 9.6 | Improper input validation in Transactions Platform in Google Chrome on on iOS pr… | |
| CVE-2026-43724 | Medium | 0.3% | 7.8 | The issue was addressed with improved input sanitization. This issue is fixed in… | |
| CVE-2026-43658 | Medium | 0.3% | 7.5 | The issue was addressed with improved memory handling. This issue is fixed in Sa… | |
| CVE-2026-64761 | Medium | 0.3% | 7.5 | A privacy issue was addressed with improved handling of user preferences. This i… | |
| CVE-2026-10951 | Medium | 0.3% | 8.8 | Use after free in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowe… | |
| CVE-2026-10952 | Medium | 0.3% | 8.8 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 … | |
| CVE-2026-86881 | Medium | 0.3% | 9.1 | A certificate validation issue was addressed with improved certificate validatio… | |
| CVE-2026-84606 | Medium | 0.3% | 7.5 | A privacy issue was addressed with improved handling of identifiers. This issue … | |
| CVE-2026-34693 | Medium | 0.3% | 8.0 | Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are af… | |
| CVE-2026-48290 | Medium | 0.3% | 8.2 | CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vuln… | |
| CVE-2026-20677 | Medium | 0.3% | 9.0 | A race condition was addressed with improved handling of symbolic links. This is… | |
| CVE-2026-43813 | Medium | 0.3% | 7.1 | A validation issue was addressed with improved input sanitization. This issue is… | |
| CVE-2026-28938 | Medium | 0.3% | 7.5 | A privacy issue was addressed by moving sensitive data. This issue is fixed in i… | |
| CVE-2026-86895 | Medium | 0.3% | 7.5 | An information disclosure issue was addressed with improved state management. Th… | |
| CVE-2026-9963 | Medium | 0.3% | 7.5 | Uninitialized Use in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed… | |
| CVE-2026-10915 | Medium | 0.3% | 8.3 | Use after free in Core in Google Chrome on iOS prior to 149.0.7827.53 allowed a … | |
| CVE-2026-10961 | Medium | 0.3% | 8.3 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 … | |
| CVE-2026-9956 | Medium | 0.3% | 7.5 | Use after free in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a … | |
| CVE-2026-86904 | Medium | 0.3% | 7.5 | A privacy issue was addressed with improved state management. This issue is fixe… | |
| CVE-2026-65415 | Medium | 0.2% | 8.1 | A race condition was addressed with additional validation. This issue is fixed i… | |
| CVE-2026-43776 | Medium | 0.2% | 7.8 | A buffer overflow was addressed with improved bounds checking. This issue is fix… |