Apple iOS vulnerabilities: known CVEs & security history
Apple · Operating system · 253 tracked CVEs · 1 actively exploited · updated August 2026 · what is a CVE? →
This is the full list of known vulnerabilities (CVEs) across all Apple iOS release lines — 253 in total, with 1 actively exploited in the wild. A CVE here doesn't mean your version is affected — check Apple iOS's current status and the safe version to run.
Known Apple iOS CVEs
Actively-exploited and most-severe first. Showing the top 80 of 253. Open any CVE for full details.
| CVE | Severity | CVSS | EPSS | Year |
|---|---|---|---|---|
| CVE-2025-31277⚡ exploited | high | 8.8 | 1% | 2025 |
| CVE-2026-64775 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64774 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64772 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64771 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64770 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64769 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64751 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64746 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64733 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64729 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64726 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64720 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64700 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43822 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43814 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43812 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43810 | critical | 9.8 | 1% | 2026 |
| CVE-2026-43807 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43805 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43803 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43799 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43778 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43769 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43730 | critical | 9.8 | 0% | 2026 |
| CVE-2026-28928 | critical | 9.8 | 0% | 2026 |
| CVE-2026-30789 | critical | 9.8 | 0% | 2026 |
| CVE-2026-30783 | critical | 9.8 | 0% | 2026 |
| CVE-2022-37434 | critical | 9.8 | 16% | 2022 |
| CVE-2016-9841 | critical | 9.8 | 8% | 2017 |
| CVE-2026-13843 | critical | 9.6 | 0% | 2026 |
| CVE-2026-11165 | critical | 9.6 | 0% | 2026 |
| CVE-2026-64740 | critical | 9.3 | 0% | 2026 |
| CVE-2026-34691 | critical | 9.3 | 0% | 2026 |
| CVE-2026-39868 | critical | 9.1 | 1% | 2026 |
| CVE-2026-64783 | high | 8.8 | 0% | 2026 |
| CVE-2026-64757 | high | 8.8 | 0% | 2026 |
| CVE-2026-64739 | high | 8.8 | 0% | 2026 |
| CVE-2026-43818 | high | 8.8 | 0% | 2026 |
| CVE-2026-28931 | high | 8.8 | 0% | 2026 |
| CVE-2026-14099 | high | 8.8 | 0% | 2026 |
| CVE-2026-14067 | high | 8.8 | 0% | 2026 |
| CVE-2026-13918 | high | 8.8 | 0% | 2026 |
| CVE-2026-13915 | high | 8.8 | 0% | 2026 |
| CVE-2026-13850 | high | 8.8 | 0% | 2026 |
| CVE-2026-43731 | high | 8.8 | 0% | 2026 |
| CVE-2026-43715 | high | 8.8 | 1% | 2026 |
| CVE-2026-43705 | high | 8.8 | 0% | 2026 |
| CVE-2026-11272 | high | 8.8 | 0% | 2026 |
| CVE-2026-11202 | high | 8.8 | 0% | 2026 |
| CVE-2026-10958 | high | 8.8 | 0% | 2026 |
| CVE-2026-10952 | high | 8.8 | 0% | 2026 |
| CVE-2026-10951 | high | 8.8 | 0% | 2026 |
| CVE-2026-10896 | high | 8.8 | 0% | 2026 |
| CVE-2026-10885 | high | 8.8 | 0% | 2026 |
| CVE-2026-28955 | high | 8.8 | 1% | 2026 |
| CVE-2026-28947 | high | 8.8 | 0% | 2026 |
| CVE-2026-28847 | high | 8.8 | 1% | 2026 |
| CVE-2025-43202 | high | 8.8 | 0% | 2026 |
| CVE-2023-43010 | high | 8.8 | 1% | 2026 |
| CVE-2025-43433 | high | 8.8 | 1% | 2025 |
| CVE-2016-9842 | high | 8.8 | 5% | 2017 |
| CVE-2016-9840 | high | 8.8 | 5% | 2017 |
| CVE-2026-28973 | high | 8.6 | 0% | 2026 |
| CVE-2026-13813 | high | 8.3 | 0% | 2026 |
| CVE-2026-10961 | high | 8.3 | 0% | 2026 |
| CVE-2026-10915 | high | 8.3 | 0% | 2026 |
| CVE-2026-48290 | high | 8.2 | 0% | 2026 |
| CVE-2026-64768 | high | 8.1 | 0% | 2026 |
| CVE-2026-64719 | high | 8.1 | 0% | 2026 |
| CVE-2026-64713 | high | 8.1 | 0% | 2026 |
| CVE-2026-43735 | high | 8.1 | 0% | 2026 |
| CVE-2026-30794 | high | 8.1 | 0% | 2026 |
| CVE-2026-30792 | high | 8.1 | 0% | 2026 |
| CVE-2026-34693 | high | 8 | 0% | 2026 |
| CVE-2025-31223 | high | 8 | 1% | 2025 |
| CVE-2026-64766 | high | 7.8 | 0% | 2026 |
| CVE-2026-64765 | high | 7.8 | 0% | 2026 |
| CVE-2026-64764 | high | 7.8 | 0% | 2026 |
| CVE-2026-64763 | high | 7.8 | 0% | 2026 |
173 older / lower-severity CVEs not shown — see Apple iOS's full record.
Is my Apple iOS version affected?
The list above spans every release. To know whether your version is affected — and the minimum safe version to upgrade to — check it directly.
Check your Apple iOS version → · Monitor Apple iOS for new CVEs →
Apple iOS vulnerabilities — frequently asked
How many known vulnerabilities does Apple iOS have?
IsItPatched tracks 253 CVEs for Apple iOS, 1 of which is actively exploited (CISA KEV). 34 are critical-severity and 82 high-severity. These span every release line — what matters is whether the version you run is affected.
Does Apple iOS have any actively-exploited vulnerabilities?
Yes — 1 Apple iOS CVE is in CISA's Known Exploited Vulnerabilities catalog, meaning it is confirmed exploited in the wild. Patch it as a priority.
What is the most severe Apple iOS vulnerability?
Among tracked issues, CVE-2025-31277 (HIGH, CVSS 8.8), which is actively exploited, ranks highest — a Memory corruption weakness.
Is Apple iOS safe to use?
It depends on the version. The latest supported Apple iOS release (26.6) clears the known issues; older versions may still be affected. Check the exact version you run for a verdict.
CVE data aggregated from NVD, CISA KEV and EPSS (FIRST.org). Related: Apple iOS security status · Apple iOS end-of-life · actively-exploited CVEs. Always verify against Apple's advisories — see our disclaimer.