Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
iOS Number Of NVD 3541 CRITICAL 137 HIGH 1622 MEDIUM 1441 LOW 245
URL https://www.apple.com/jp/ios/
Explanation This is the operating system installed on the iPhone provided by Apple.
Tag
  • Mobile
  • Apple
Add Information URL
No Type Name URL
1 https://support.apple.com/en-us/HT201222
2 https://developer.apple.com/documentation/ios-ipados-release-notes
3 https://en.wikipedia.org/wiki/IOS_version_history
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
3421 iOS17 17.6.1 Aug. 27, 2024 Sept. 18, 2023 8 70 139 21
3422 iOS16 16.4.1 April 7, 2023 Sept. 12, 2022 24 200 264 55
3423 iOS 15 15.7 Sept. 12, 2022 Sept. 20, 2021 38 351 349 71
3424 iOS 14 14.8 Sept. 13, 2021 July 9, 2020 52 522 456 78
3425 iOS 13 13.7 Sept. 1, 2020 Sept. 19, 2019 64 702 540 95
3426 iOS 12 12.5.1 Jan. 11, 2021 Sept. 17, 2018 83 859 620 107
3427 iOS 11 11.4.1 July 9, 2018 Sept. 19, 2017 93 1024 689 115
3428 iOS 10 10.3.4 July 22, 2019 Sept. 13, 2016 119 1245 789 132
3429 iOS 9 9.3.6 July 22, 2019 Sept. 16, 2015 133 1371 916 148
3430 iOS 8 8.4.1 Aug. 13, 2015 Sept. 17, 2014 131 1426 1129 180
3431 iOS 7 7.0.6 Feb. 21, 2014 Sept. 18, 2013 131 1447 1192 203
3432 iOS 6 6.0.2 Dec. 18, 2012 Sept. 19, 2012 131 1473 1255 215
3433 iOS 5 5.0.1 Nov. 10, 2011 Oct. 12, 2011 131 1542 1329 227
3434 iOS 4 4.0.2 Aug. 11, 2010 June 21, 2010 132 1569 1384 234
3435 iPhone OS 3 3.0.1 July 31, 2009 June 17, 2009 132 1576 1399 237
3436 iPhone OS 2 1.1.5 July 15, 2008 July 11, 2008 133 1588 1394 235
3437 iPhone OS 1 1.0.2 Aug. 21, 2007 June 29, 2007 132 1593 1395 236
3438 iOS7.1 7.1.2 131 1440 1168 197
3439 iOS6.1 6.1.6 131 1464 1236 211
3440 iOS6.0 6.0.2 131 1473 1254 215
3441 iOS5.1 5.1.1 131 1483 1307 225
3442 iOS4.3 4.3.5 131 1561 1357 233
3443 iOS4.2 4.2.9 131 1563 1362 233
3444 iOS4.1 4.1 132 1566 1374 233
3445 iOS3.2 3.2.2 132 1570 1389 235
3446 iOS3.1 3.1.3 132 1573 1397 235
3447 iOS2.2 2.2.1 132 1584 1393 231
3448 iOS2.1 2.1.1 132 1588 1394 235
3449 iOS2.0 2.0.2 133 1588 1393 235
3450 iOS16.2 16.2 18 165 231 54
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
3421 -
6.8 		MEDIUM Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via un… CWE-416
 Use After Free 		CVE-2011-1449 cpe:2.3:o:apple:iphone_os:*:* 5.0 2024-11-21 10:26
2011-05-4 		Show GitHub Exploit DB Packet Storm
3422 -
4.3 		MEDIUM The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site. NOTE… CWE-200
Information Exposure 		CVE-2011-0195 cpe:2.3:o:apple:iphone_os:4.3.1:*
cpe:2.3:o:apple:iphone_os:4.3.0:* 		2024-11-21 10:23
2011-04-16 		Show GitHub Exploit DB Packet Storm
3423 -
7.5 		HIGH Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead… CWE-20
 Improper Input Validation  		CVE-2011-1296 cpe:2.3:o:apple:iphone_os:*:* 5.0 2024-11-21 10:26
2011-03-26 		Show GitHub Exploit DB Packet Storm
3424 -
7.5 		HIGH WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node parentage, which allows remote attackers to cause a denial of service (DOM tree corru… CWE-20
 Improper Input Validation  		CVE-2011-1295 cpe:2.3:o:apple:iphone_os:*:* 5.0 2024-11-21 10:26
2011-03-26 		Show GitHub Exploit DB Packet Storm
3425 -
7.5 		HIGH Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact v… CWE-416
 Use After Free 		CVE-2011-1293 cpe:2.3:o:apple:iphone_os:*:* 5.0 2024-11-21 10:26
2011-03-26 		Show GitHub Exploit DB Packet Storm
3426 -
5.0 		MEDIUM The stateless address autoconfiguration (aka SLAAC) functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, w… CWE-200
Information Exposure 		CVE-2011-1418 cpe:2.3:o:apple:iphone_os:4.1:*
cpe:2.3:o:apple:iphone_os:4.0:*
cpe:2.3:o:apple:iphone_os:4.0.2:*
cpe:2.3:o:ap… 		4.2 2024-11-21 10:26
2011-03-12 		Show GitHub Exploit DB Packet Storm
3427 -
4.3 		MEDIUM WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources," which allows remote attackers to cause a denial of service (resource unavaila… CWE-20
 Improper Input Validation  		CVE-2011-0163 cpe:2.3:o:apple:iphone_os:4.1:*
cpe:2.3:o:apple:iphone_os:4.0:*
cpe:2.3:o:apple:iphone_os:4.0.2:*
cpe:2.3:o:ap… 		4.2 2024-11-21 10:23
2011-03-12 		Show GitHub Exploit DB Packet Storm
3428 -
7.8 		HIGH Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service (device reset) via unspeci… CWE-20
 Improper Input Validation  		CVE-2011-0162 cpe:2.3:o:apple:iphone_os:4.1:*
cpe:2.3:o:apple:iphone_os:4.0:*
cpe:2.3:o:apple:iphone_os:4.0.2:*
cpe:2.3:o:ap… 		4.2 2024-11-21 10:23
2011-03-12 		Show GitHub Exploit DB Packet Storm
3429 -
4.3 		MEDIUM WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, which allows remote attackers to bypass the Same Origin Policy and inject Cascading … CWE-264
CWE-20
Permissions, Privileges, and Access Controls
 Improper Input Validation  		CVE-2011-0161 cpe:2.3:o:apple:iphone_os:4.1:*
cpe:2.3:o:apple:iphone_os:4.0:*
cpe:2.3:o:apple:iphone_os:4.0.2:*
cpe:2.3:o:ap… 		4.2 2024-11-21 10:23
2011-03-12 		Show GitHub Exploit DB Packet Storm
3430 -
5.0 		MEDIUM WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture cred… CWE-20
 Improper Input Validation  		CVE-2011-0160 cpe:2.3:o:apple:iphone_os:4.1:*
cpe:2.3:o:apple:iphone_os:4.0:*
cpe:2.3:o:apple:iphone_os:4.0.2:*
cpe:2.3:o:ap… 		4.2 2024-11-21 10:23
2011-03-12 		Show GitHub Exploit DB Packet Storm