Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
iOS Number Of NVD 3626 CRITICAL 138 HIGH 1666 MEDIUM 1480 LOW 246
URL https://www.apple.com/jp/ios/
Explanation This is the operating system installed on the iPhone provided by Apple.
Tag
  • Mobile
  • Apple
Add Information URL
No Type Name URL
1 https://support.apple.com/en-us/HT201222
2 https://developer.apple.com/documentation/ios-ipados-release-notes
3 https://en.wikipedia.org/wiki/IOS_version_history
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
2651 iOS 26 26.5.1 June 1, 2026 Sept. 15, 2025 1 40 38 1
2652 iOS 18 18.7.9 May 11, 2026 Sept. 16, 2024 8 64 89 8
2653 iOS 17 17.6.1 Aug. 27, 2024 Sept. 18, 2023 9 114 178 22
2654 iOS 16 16.4.1 April 7, 2023 Sept. 12, 2022 25 244 303 56
2655 iOS 15 15.7 Sept. 12, 2022 Sept. 20, 2021 39 395 388 72
2656 iOS 14 14.8 Sept. 13, 2021 July 9, 2020 53 566 495 79
2657 iOS 13 13.7 Sept. 1, 2020 Sept. 19, 2019 65 746 579 96
2658 iOS 12 12.5.1 Jan. 11, 2021 Sept. 17, 2018 84 903 659 108
2659 iOS 11 11.4.1 July 9, 2018 Sept. 19, 2017 94 1068 728 116
2660 iOS 10 10.3.4 July 22, 2019 Sept. 13, 2016 120 1289 828 133
2661 iOS 9 9.3.6 July 22, 2019 Sept. 16, 2015 134 1415 955 149
2662 iOS 8 8.4.1 Aug. 13, 2015 Sept. 17, 2014 132 1470 1168 181
2663 iOS 7 7.0.6 Feb. 21, 2014 Sept. 18, 2013 132 1491 1231 204
2664 iOS 6 6.0.2 Dec. 18, 2012 Sept. 19, 2012 132 1517 1294 216
2665 iOS 5 5.0.1 Nov. 10, 2011 Oct. 12, 2011 132 1586 1368 228
2666 iOS 4 4.0.2 Aug. 11, 2010 June 21, 2010 133 1613 1423 235
2667 iPhone OS 3 3.0.1 July 31, 2009 June 17, 2009 133 1620 1438 238
2668 iPhone OS 2 1.1.5 July 15, 2008 July 11, 2008 134 1632 1433 236
2669 iPhone OS 1 1.0.2 Aug. 21, 2007 June 29, 2007 133 1637 1434 237
2670 iOS7.1 7.1.2 132 1484 1207 198
2671 iOS6.1 6.1.6 132 1508 1275 212
2672 iOS6.0 6.0.2 132 1517 1293 216
2673 iOS5.1 5.1.1 132 1527 1346 226
2674 iOS4.3 4.3.5 132 1605 1396 234
2675 iOS4.2 4.2.9 132 1607 1401 234
2676 iOS4.1 4.1 133 1610 1413 234
2677 iOS3.2 3.2.2 133 1614 1428 236
2678 iOS3.1 3.1.3 133 1617 1436 236
2679 iOS2.2 2.2.1 133 1628 1432 232
2680 iOS2.1 2.1.1 133 1632 1433 236
2681 iOS2.0 2.0.2 134 1632 1432 236
2682 iOS16.2 16.2 19 209 270 55
2683 iOS 27 138 1666 1480 246
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
2651 6.5
4.3 		MEDIUM
Network 		WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to bypass the Same Origin Policy and obtain physical-location data via a crafted geolocation request. CWE-200
Information Exposure 		CVE-2016-1779 cpe:2.3:o:apple:iphone_os:*:* 9.2.1 2024-11-21 11:47
2016-03-24 		Show GitHub Exploit DB Packet Storm
2652 8.8
9.3 		HIGH
Network 		WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. CWE-399
 Resource Management Errors 		CVE-2016-1778 cpe:2.3:o:apple:iphone_os:*:* 9.2.1 2024-11-21 11:47
2016-03-24 		Show GitHub Exploit DB Packet Storm
2653 7.8
9.3 		HIGH
Local 		TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1775 cpe:2.3:o:apple:iphone_os:*:* 9.3 2024-11-21 11:47
2016-03-24 		Show GitHub Exploit DB Packet Storm
2654 7.5
5.0 		HIGH
Network 		The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors. NVD-CWE-noinfo
CVE-2016-1766 cpe:2.3:o:apple:iphone_os:*:* 9.2.1 2024-11-21 11:47
2016-03-24 		Show GitHub Exploit DB Packet Storm
2655 3.5
3.5 		LOW
Network 		Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing … CWE-20
 Improper Input Validation  		CVE-2016-1763 cpe:2.3:o:apple:iphone_os:*:* 9.2.1 2024-11-21 11:47
2016-03-24 		Show GitHub Exploit DB Packet Storm
2656 8.1
5.8 		HIGH
Network 		The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1762 cpe:2.3:o:apple:iphone_os:*:* 9.3 2024-11-21 11:47
2016-03-24 		Show GitHub Exploit DB Packet Storm
2657 9.8
10.0 		CRITICAL
Network 		libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML docum… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1761 cpe:2.3:o:apple:iphone_os:*:* 9.2.1 2024-11-21 11:47
2016-03-24 		Show GitHub Exploit DB Packet Storm
2658 3.3
4.3 		LOW
Local 		The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app. CWE-119
CWE-200
Incorrect Access of Indexable Resource ('Range Error') 
Information Exposure 		CVE-2016-1758 cpe:2.3:o:apple:iphone_os:*:* 9.2.1 2024-11-21 11:47
2016-03-24 		Show GitHub Exploit DB Packet Storm
2659 7.0
9.3 		HIGH
Local 		Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app. CWE-362
Race Condition 		CVE-2016-1757 cpe:2.3:o:apple:iphone_os:*:* 9.2.1 2024-11-21 11:47
2016-03-24 		Show GitHub Exploit DB Packet Storm
2660 7.8
9.3 		HIGH
Local 		The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app. NVD-CWE-Other
CVE-2016-1756 cpe:2.3:o:apple:iphone_os:*:* 9.2.1 2024-11-21 11:47
2016-03-24 		Show GitHub Exploit DB Packet Storm