Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
iOS Number Of NVD 3626 CRITICAL 138 HIGH 1666 MEDIUM 1480 LOW 246
URL https://www.apple.com/jp/ios/
Explanation This is the operating system installed on the iPhone provided by Apple.
Tag
  • Apple
  • Mobile

Add Information URL
No Type Name URL
1 https://support.apple.com/en-us/HT201222
2 https://developer.apple.com/documentation/ios-ipados-release-notes
3 https://en.wikipedia.org/wiki/IOS_version_history

List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support
Extended
for a fee
Critical High Medium Low
3501 iOS 26 26.5.1 June 1, 2026 Sept. 15, 2025 1 40 38 1
3502 iOS 18 18.7.9 May 11, 2026 Sept. 16, 2024 8 64 89 8
3503 iOS 17 17.6.1 Aug. 27, 2024 Sept. 18, 2023 9 114 178 22
3504 iOS 16 16.4.1 April 7, 2023 Sept. 12, 2022 25 244 303 56
3505 iOS 15 15.7 Sept. 12, 2022 Sept. 20, 2021 39 395 388 72
3506 iOS 14 14.8 Sept. 13, 2021 July 9, 2020 53 566 495 79
3507 iOS 13 13.7 Sept. 1, 2020 Sept. 19, 2019 65 746 579 96
3508 iOS 12 12.5.1 Jan. 11, 2021 Sept. 17, 2018 84 903 659 108
3509 iOS 11 11.4.1 July 9, 2018 Sept. 19, 2017 94 1068 728 116
3510 iOS 10 10.3.4 July 22, 2019 Sept. 13, 2016 120 1289 828 133
3511 iOS 9 9.3.6 July 22, 2019 Sept. 16, 2015 134 1415 955 149
3512 iOS 8 8.4.1 Aug. 13, 2015 Sept. 17, 2014 132 1470 1168 181
3513 iOS 7 7.0.6 Feb. 21, 2014 Sept. 18, 2013 132 1491 1231 204
3514 iOS 6 6.0.2 Dec. 18, 2012 Sept. 19, 2012 132 1517 1294 216
3515 iOS 5 5.0.1 Nov. 10, 2011 Oct. 12, 2011 132 1586 1368 228
3516 iOS 4 4.0.2 Aug. 11, 2010 June 21, 2010 133 1613 1423 235
3517 iPhone OS 3 3.0.1 July 31, 2009 June 17, 2009 133 1620 1438 238
3518 iPhone OS 2 1.1.5 July 15, 2008 July 11, 2008 134 1632 1433 236
3519 iPhone OS 1 1.0.2 Aug. 21, 2007 June 29, 2007 133 1637 1434 237
3520 iOS7.1 7.1.2 132 1484 1207 198
3521 iOS6.1 6.1.6 132 1508 1275 212
3522 iOS6.0 6.0.2 132 1517 1293 216
3523 iOS5.1 5.1.1 132 1527 1346 226
3524 iOS4.3 4.3.5 132 1605 1396 234
3525 iOS4.2 4.2.9 132 1607 1401 234
3526 iOS4.1 4.1 133 1610 1413 234
3527 iOS3.2 3.2.2 133 1614 1428 236
3528 iOS3.1 3.1.3 133 1617 1436 236
3529 iOS2.2 2.2.1 133 1628 1432 232
3530 iOS2.1 2.1.1 133 1632 1433 236
3531 iOS2.0 2.0.2 134 1632 1432 236
3532 iOS16.2 16.2 19 209 270 55
3533 iOS 27 138 1666 1480 246
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2
Level
Attach Vector
Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date
Show Affected Exploit
PoC
Search
3501 -
6.8
MEDIUM Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown… CWE-20
 Improper Input Validation 
CVE-2011-2359 cpe:2.3:o:apple:iphone_os:*:* 5.0 2024-11-21 10:28
2011-08-3
Show GitHub Exploit DB Packet Storm
3502 -
7.2
HIGH The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted appl… CWE-264
Permissions, Privileges, and Access Controls
CVE-2011-0227 cpe:2.3:o:apple:iphone_os:4.3.3:*
cpe:2.3:o:apple:iphone_os:4.3.2:*
cpe:2.3:o:apple:iphone_os:4.3.1:*
cpe:2.3:…
4.2.8 2024-11-21 10:23
2011-07-20
Show GitHub Exploit DB Packet Storm
3503 -
9.3
HIGH Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute … CWE-189
Numeric Errors
CVE-2011-0226 cpe:2.3:o:apple:iphone_os:4.3.3:*
cpe:2.3:o:apple:iphone_os:4.3.2:*
cpe:2.3:o:apple:iphone_os:4.3.1:*
cpe:2.3:…
4.2.8 2024-11-21 10:23
2011-07-20
Show GitHub Exploit DB Packet Storm
3504 -
6.8
MEDIUM Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements. CWE-416
 Use After Free
CVE-2011-2351 cpe:2.3:o:apple:iphone_os:*:* 5.0 2024-11-21 10:28
2011-06-30
Show GitHub Exploit DB Packet Storm
3505 -
7.5
HIGH Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that le… CWE-20
 Improper Input Validation 
CVE-2011-1451 cpe:2.3:o:apple:iphone_os:*:* 5.0 2024-11-21 10:26
2011-05-4
Show GitHub Exploit DB Packet Storm
3506 -
6.8
MEDIUM Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via un… CWE-416
 Use After Free
CVE-2011-1449 cpe:2.3:o:apple:iphone_os:*:* 5.0 2024-11-21 10:26
2011-05-4
Show GitHub Exploit DB Packet Storm
3507 -
4.3
MEDIUM The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site. NOTE… CWE-200
Information Exposure
CVE-2011-0195 cpe:2.3:o:apple:iphone_os:4.3.1:*
cpe:2.3:o:apple:iphone_os:4.3.0:*
2024-11-21 10:23
2011-04-16
Show GitHub Exploit DB Packet Storm
3508 -
7.5
HIGH Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead… CWE-20
 Improper Input Validation 
CVE-2011-1296 cpe:2.3:o:apple:iphone_os:*:* 5.0 2024-11-21 10:26
2011-03-26
Show GitHub Exploit DB Packet Storm
3509 -
7.5
HIGH WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node parentage, which allows remote attackers to cause a denial of service (DOM tree corru… CWE-20
 Improper Input Validation 
CVE-2011-1295 cpe:2.3:o:apple:iphone_os:*:* 5.0 2024-11-21 10:26
2011-03-26
Show GitHub Exploit DB Packet Storm
3510 -
7.5
HIGH Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact v… CWE-416
 Use After Free
CVE-2011-1293 cpe:2.3:o:apple:iphone_os:*:* 5.0 2024-11-21 10:26
2011-03-26
Show GitHub Exploit DB Packet Storm