Iphone OS vulnerabilities

717 known vulnerabilities in Iphone OS from Apple. 703 are rated high or critical, and 94 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WebRTC Heap Buffer Overflow Exploited

  CVE-2022-2294Jul 28, 2022GoogleEPSS 70.8%

  Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

• 7.8 High severity

  watchOS: Out-of-bounds Write

  CVE-2022-26771May 26, 2022AppleEPSS 1.1%

  A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. A malicious application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  watchOS: Out-of-bounds Write

  CVE-2022-26768May 26, 2022AppleEPSS 1.39%

  A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, watchOS 8.6, tvOS 15.5, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  watchOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-26763May 26, 2022AppleEPSS 3.92%

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious application may be abl

• 7.8 High severity

  watchOS: Use After Free

  CVE-2022-26757May 26, 2022AppleEPSS 3.12%

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute a

• 7.8 High severity

  Security Update - Catalina: Out-of-bounds Write

  CVE-2022-26751May 26, 2022AppleEPSS 1.84%

  A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2022-26744May 26, 2022AppleEPSS 1.11%

  A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  tvOS: Out-of-bounds Write

  CVE-2022-26740May 26, 2022AppleEPSS 1.06%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  tvOS: Out-of-bounds Write

  CVE-2022-26739May 26, 2022AppleEPSS 1.06%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  tvOS: Out-of-bounds Write

  CVE-2022-26738May 26, 2022AppleEPSS 1.06%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  tvOS: Out-of-bounds Write

  CVE-2022-26737May 26, 2022AppleEPSS 1.06%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  tvOS: Out-of-bounds Write

  CVE-2022-26736May 26, 2022AppleEPSS 1.24%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  watchOS: Out-of-bounds Write

  CVE-2022-26714May 26, 2022AppleEPSS 1.21%

  A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbit

• 9.8 Critical severity

  watchOS: Integer Overflow or Wraparound

  CVE-2022-26711May 26, 2022AppleEPSS 4.04%

  An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4. A remote attacker may be able to cause unexpected application term

• 7.8 High severity

  watchOS: Use After Free

  CVE-2022-26702May 26, 2022AppleEPSS 1.19%

  A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.5 High severity

  tvOS: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2022-26701May 26, 2022AppleEPSS 1.32%

  A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  Apple macOS Out-of-Bounds Write Exploited

  CVE-2022-22675May 26, 2022AppleEPSS 12.5%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2022-22672May 26, 2022AppleEPSS 1.07%

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious application may be able to execute arbitrary code

• 7.8 High severity

  iOS and iPadOS: Use After Free

  CVE-2022-22667Mar 18, 2022AppleEPSS 1.07%

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2022-22666Mar 18, 2022AppleEPSS 1.29%

  A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. Processing a maliciously crafted image may lead to heap corruption.

• 9.8 Critical severity

  iOS and iPadOS: Use After Free

  CVE-2022-22641Mar 18, 2022AppleEPSS 1.44%

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. An application may be able to gain elevated privileges.

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2022-22640Mar 18, 2022AppleEPSS 1.17%

  A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2022-22636Mar 18, 2022AppleEPSS 1.04%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges.

• 9.8 Critical severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2022-22635Mar 18, 2022AppleEPSS 1.22%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. An application may be able to gain elevated privileges.

• 7.8 High severity

  iOS and iPadOS: Buffer Copy without Checking Size of Input

  CVE-2022-22634Mar 18, 2022AppleEPSS 1.21%

  A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. A malicious application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2022-22633Mar 18, 2022AppleEPSS 1.19%

  A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. Opening a maliciously crafted PDF file may lead to an unexpected application termin

• 8.8 High severity

  Apple iOS, iPadOS, and macOS Webkit Use-After-Free Exploited

  CVE-2022-22620Mar 18, 2022AppleEPSS 16.3%

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary

• 7.8 High severity

  iOS and iPadOS: Use After Free

  CVE-2022-22615Mar 18, 2022AppleEPSS 1.33%

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute a

• 7.8 High severity

  iOS and iPadOS: Use After Free

  CVE-2022-22614Mar 18, 2022AppleEPSS 1.33%

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute a

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2022-22613Mar 18, 2022AppleEPSS 1.22%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execu

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2022-22612Mar 18, 2022Apple

  A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to heap corruption

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Read

  CVE-2022-22611Mar 18, 2022AppleEPSS 1.09%

  An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code exec

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2022-22596Mar 18, 2022Apple

  A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges.

• 7.8 High severity

  iOS and iPadOS: Buffer Copy without Checking Size of Input

  CVE-2022-22593Mar 18, 2022AppleEPSS 1.48%

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. A malicious application may be able to e

• 8.8 High severity

  iOS and iPadOS: Use After Free

  CVE-2022-22590Mar 18, 2022AppleEPSS 1.55%

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution.

• 9.8 Critical severity

  Apple Memory Corruption Exploited

  CVE-2022-22587Mar 18, 2022AppleEPSS 11.6%

  A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is a

• 7.5 High severity

  iOS and iPadOS: Improper Link Resolution Before File Access

  CVE-2022-22585Mar 18, 2022AppleEPSS 1.65%

  An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be

• 7.8 High severity

  iOS and iPadOS: Out-of-bounds Write

  CVE-2022-22584Mar 18, 2022AppleEPSS 1.61%

  A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. Processing a maliciously crafted file may lead to arbitrary code execution.

• 7.8 High severity

  Apple Multiple Products Memory Corruption Exploited

  CVE-2021-30807Oct 19, 2021AppleEPSS 28.8%

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a re

• 8.8 High severity

  Apple iOS WebKit Buffer Overflow Exploited

  CVE-2021-30666Sep 8, 2021AppleEPSS 2.97%

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited