Apple iOS vulnerabilities: known CVEs & security history
Apple · Operating system · 704 tracked CVEs · 11 actively exploited · updated November 2026 · what is a CVE? →
This is the full list of known vulnerabilities (CVEs) across all Apple iOS release lines — 704 in total, with 11 actively exploited in the wild. A CVE here doesn't mean your version is affected — check Apple iOS's current status and the safe version to run.
Known Apple iOS CVEs
Actively-exploited and most-severe first. Showing the top 80 of 704. Open any CVE for full details.
| CVE | Severity | CVSS | EPSS | Year |
|---|---|---|---|---|
| CVE-2016-1019⚡ exploited | critical | 9.8 | 22% | 2016 |
| CVE-2026-86950⚡ exploited | high | 8.8 | 26% | 2026 |
| CVE-2025-43529⚡ exploited | high | 8.8 | 9% | 2025 |
| CVE-2025-14174⚡ exploited | high | 8.8 | 22% | 2025 |
| CVE-2023-43000⚡ exploited | high | 8.8 | 4% | 2025 |
| CVE-2025-31277⚡ exploited | high | 8.8 | 2% | 2025 |
| CVE-2025-6558⚡ exploited | high | 8.8 | 10% | 2025 |
| CVE-2022-2294⚡ exploited | high | 8.8 | 70% | 2022 |
| CVE-2025-43510⚡ exploited | high | 7.8 | 0% | 2025 |
| CVE-2025-43520⚡ exploited | medium | 5.5 | 0% | 2025 |
| CVE-2025-43200⚡ exploited | medium | 4.2 | 1% | 2025 |
| CVE-2026-84609 | critical | 9.8 | 0% | 2026 |
| CVE-2026-84561 | critical | 9.8 | 0% | 2026 |
| CVE-2026-65414 | critical | 9.8 | 1% | 2026 |
| CVE-2026-64775 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64774 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64772 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64771 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64770 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64769 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64751 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64746 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64733 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64729 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64726 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64720 | critical | 9.8 | 0% | 2026 |
| CVE-2026-64700 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43822 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43814 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43812 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43810 | critical | 9.8 | 1% | 2026 |
| CVE-2026-43807 | critical | 9.8 | 1% | 2026 |
| CVE-2026-43805 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43803 | critical | 9.8 | 1% | 2026 |
| CVE-2026-43799 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43778 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43769 | critical | 9.8 | 0% | 2026 |
| CVE-2026-43730 | critical | 9.8 | 0% | 2026 |
| CVE-2026-28928 | critical | 9.8 | 0% | 2026 |
| CVE-2026-30789 | critical | 9.8 | 0% | 2026 |
| CVE-2026-30783 | critical | 9.8 | 0% | 2026 |
| CVE-2025-43359 | critical | 9.8 | 1% | 2025 |
| CVE-2025-43347 | critical | 9.8 | 1% | 2025 |
| CVE-2025-43343 | critical | 9.8 | 1% | 2025 |
| CVE-2025-43342 | critical | 9.8 | 1% | 2025 |
| CVE-2025-31255 | critical | 9.8 | 2% | 2025 |
| CVE-2022-37434 | critical | 9.8 | 19% | 2022 |
| CVE-2016-9841 | critical | 9.8 | 8% | 2017 |
| CVE-2016-4658 | critical | 9.8 | 9% | 2016 |
| CVE-2026-106414 | critical | 9.6 | — | 2026 |
| CVE-2026-106323 | critical | 9.6 | — | 2026 |
| CVE-2026-87609 | critical | 9.6 | 0% | 2026 |
| CVE-2026-85047 | critical | 9.6 | 0% | 2026 |
| CVE-2026-78964 | critical | 9.6 | 1% | 2026 |
| CVE-2026-78935 | critical | 9.6 | 0% | 2026 |
| CVE-2026-17684 | critical | 9.6 | 0% | 2026 |
| CVE-2026-17669 | critical | 9.6 | 0% | 2026 |
| CVE-2026-13843 | critical | 9.6 | 0% | 2026 |
| CVE-2026-11165 | critical | 9.6 | 0% | 2026 |
| CVE-2026-64740 | critical | 9.3 | 0% | 2026 |
| CVE-2026-34691 | critical | 9.3 | 0% | 2026 |
| CVE-2026-86881 | critical | 9.1 | 0% | 2026 |
| CVE-2026-84625 | critical | 9.1 | 0% | 2026 |
| CVE-2026-39868 | critical | 9.1 | 1% | 2026 |
| CVE-2026-20677 | critical | 9 | 0% | 2026 |
| CVE-2026-113323 | high | 8.8 | 0% | 2026 |
| CVE-2026-113320 | high | 8.8 | 0% | 2026 |
| CVE-2026-113268 | high | 8.8 | 0% | 2026 |
| CVE-2026-113249 | high | 8.8 | 0% | 2026 |
| CVE-2026-113236 | high | 8.8 | 0% | 2026 |
| CVE-2026-113043 | high | 8.8 | 1% | 2026 |
| CVE-2026-106387 | high | 8.8 | 0% | 2026 |
| CVE-2026-106309 | high | 8.8 | — | 2026 |
| CVE-2026-106203 | high | 8.8 | 0% | 2026 |
| CVE-2026-65391 | high | 8.8 | 0% | 2026 |
| CVE-2026-65390 | high | 8.8 | 0% | 2026 |
| CVE-2026-43686 | high | 8.8 | 0% | 2026 |
| CVE-2026-43670 | high | 8.8 | 0% | 2026 |
| CVE-2026-65346 | high | 8.8 | 0% | 2026 |
| CVE-2026-43794 | high | 8.8 | 0% | 2026 |
624 older / lower-severity CVEs not shown — see Apple iOS's full record.
Is my Apple iOS version affected?
The list above spans every release. To know whether your version is affected — and the minimum safe version to upgrade to — check it directly.
Check your Apple iOS version → · Monitor Apple iOS for new CVEs →
Apple iOS vulnerabilities — frequently asked
How many known vulnerabilities does Apple iOS have?
IsItPatched tracks 704 CVEs for Apple iOS, 11 of which are actively exploited (CISA KEV). 55 are critical-severity and 213 high-severity. These span every release line — what matters is whether the version you run is affected.
Does Apple iOS have any actively-exploited vulnerabilities?
Yes — 11 Apple iOS CVEs are in CISA's Known Exploited Vulnerabilities catalog, meaning they are confirmed exploited in the wild (2 linked to ransomware). Patch these as a priority.
What is the most severe Apple iOS vulnerability?
Among tracked issues, CVE-2016-1019 (CRITICAL, CVSS 9.8), which is actively exploited, ranks highest.
Is Apple iOS safe to use?
It depends on the version. The latest supported Apple iOS release (27.2) clears the known issues; older versions may still be affected. Check the exact version you run for a verdict.
CVE data aggregated from NVD, CISA KEV and EPSS (FIRST.org). Related: Apple iOS security status · Apple iOS end-of-life · actively-exploited CVEs. Always verify against Apple's advisories — see our disclaimer.