Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
iOS Number Of NVD 3626 CRITICAL 138 HIGH 1666 MEDIUM 1480 LOW 246
URL https://www.apple.com/jp/ios/
Explanation This is the operating system installed on the iPhone provided by Apple.
Tag
  • Apple
  • Mobile

Add Information URL
No Type Name URL
1 https://support.apple.com/en-us/HT201222
2 https://developer.apple.com/documentation/ios-ipados-release-notes
3 https://en.wikipedia.org/wiki/IOS_version_history

List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support
Extended
for a fee
Critical High Medium Low
3571 iOS 26 26.5.1 June 1, 2026 Sept. 15, 2025 1 40 38 1
3572 iOS 18 18.7.9 May 11, 2026 Sept. 16, 2024 8 64 89 8
3573 iOS 17 17.6.1 Aug. 27, 2024 Sept. 18, 2023 9 114 178 22
3574 iOS 16 16.4.1 April 7, 2023 Sept. 12, 2022 25 244 303 56
3575 iOS 15 15.7 Sept. 12, 2022 Sept. 20, 2021 39 395 388 72
3576 iOS 14 14.8 Sept. 13, 2021 July 9, 2020 53 566 495 79
3577 iOS 13 13.7 Sept. 1, 2020 Sept. 19, 2019 65 746 579 96
3578 iOS 12 12.5.1 Jan. 11, 2021 Sept. 17, 2018 84 903 659 108
3579 iOS 11 11.4.1 July 9, 2018 Sept. 19, 2017 94 1068 728 116
3580 iOS 10 10.3.4 July 22, 2019 Sept. 13, 2016 120 1289 828 133
3581 iOS 9 9.3.6 July 22, 2019 Sept. 16, 2015 134 1415 955 149
3582 iOS 8 8.4.1 Aug. 13, 2015 Sept. 17, 2014 132 1470 1168 181
3583 iOS 7 7.0.6 Feb. 21, 2014 Sept. 18, 2013 132 1491 1231 204
3584 iOS 6 6.0.2 Dec. 18, 2012 Sept. 19, 2012 132 1517 1294 216
3585 iOS 5 5.0.1 Nov. 10, 2011 Oct. 12, 2011 132 1586 1368 228
3586 iOS 4 4.0.2 Aug. 11, 2010 June 21, 2010 133 1613 1423 235
3587 iPhone OS 3 3.0.1 July 31, 2009 June 17, 2009 133 1620 1438 238
3588 iPhone OS 2 1.1.5 July 15, 2008 July 11, 2008 134 1632 1433 236
3589 iPhone OS 1 1.0.2 Aug. 21, 2007 June 29, 2007 133 1637 1434 237
3590 iOS7.1 7.1.2 132 1484 1207 198
3591 iOS6.1 6.1.6 132 1508 1275 212
3592 iOS6.0 6.0.2 132 1517 1293 216
3593 iOS5.1 5.1.1 132 1527 1346 226
3594 iOS4.3 4.3.5 132 1605 1396 234
3595 iOS4.2 4.2.9 132 1607 1401 234
3596 iOS4.1 4.1 133 1610 1413 234
3597 iOS3.2 3.2.2 133 1614 1428 236
3598 iOS3.1 3.1.3 133 1617 1436 236
3599 iOS2.2 2.2.1 133 1628 1432 232
3600 iOS2.1 2.1.1 133 1632 1433 236
3601 iOS2.0 2.0.2 134 1632 1432 236
3602 iOS16.2 16.2 19 209 270 55
3603 iOS 27 138 1666 1480 246
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2
Level
Attach Vector
Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date
Show Affected Exploit
PoC
Search
3571 -
9.3
HIGH Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code … CWE-399
 Resource Management Errors
CVE-2010-1387 cpe:2.3:o:apple:iphone_os:3.2:*
cpe:2.3:o:apple:iphone_os:3.1:*
cpe:2.3:o:apple:iphone_os:3.1.3:*
cpe:2.3:o:ap…
3.2.1 2024-11-21 10:14
2010-06-19
Show GitHub Exploit DB Packet Storm
3572 -
5.0
MEDIUM The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service (Safari, Mail, or Springboard crash) via a craft… CWE-20
 Improper Input Validation 
CVE-2010-1226 cpe:2.3:o:apple:iphone_os:3.1:*
cpe:2.3:o:apple:iphone_os:3.1.3:*
2010-04-2 13:00
2010-04-2
Show GitHub Exploit DB Packet Storm
3573 -
4.3
MEDIUM Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a MARQUEE element. CWE-20
 Improper Input Validation 
CVE-2010-1181 cpe:2.3:o:apple:iphone_os:3.1.3:* 2012-03-30 13:00
2010-03-30
Show GitHub Exploit DB Packet Storm
3574 -
10.0
HIGH Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 10.4, and Safari on Apple iPhone OS allows remote attackers … CWE-399
 Resource Management Errors
CVE-2010-1119 cpe:2.3:o:apple:iphone_os:3.1:*
cpe:2.3:o:apple:iphone_os:3.1.3:*
cpe:2.3:o:apple:iphone_os:3.1.2:*
cpe:2.3:o:…
2017-09-19 10:30
2010-03-26
Show GitHub Exploit DB Packet Storm
3575 8.8
9.3
HIGH
Network
Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improp… CWE-416
 Use After Free
CVE-2010-0050 cpe:2.3:o:apple:iphone_os:*:* 2.0 4.0 2024-02-3 11:24
2010-03-15
Show GitHub Exploit DB Packet Storm
3576 -
4.6
MEDIUM Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, … CWE-399
 Resource Management Errors
CVE-2010-0038 cpe:2.3:o:apple:iphone_os:3.1.2:-
cpe:2.3:o:apple:iphone_os:3.1.2:*
cpe:2.3:o:apple:iphone_os:3.0:-
cpe:2.3:o:…
2021-05-23 09:52
2010-02-4
Show GitHub Exploit DB Packet Storm
3577 -
6.8
MEDIUM The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS req… CWE-352
 Origin Validation Error
CVE-2009-2816 cpe:2.3:o:apple:iphone_os:*:* 4.0 2026-04-23 09:35
2009-11-14
Show GitHub Exploit DB Packet Storm
3578 -
7.5
HIGH iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certif… CWE-310
Cryptographic Issues
CVE-2009-3273 cpe:2.3:o:apple:iphone_os:3.0:-
cpe:2.3:o:apple:iphone_os:3.0:*
cpe:2.3:o:apple:iphone_os:3.0.1:-
cpe:2.3:o:ap…
2026-04-23 09:35
2009-09-22
Show GitHub Exploit DB Packet Storm
3579 -
4.3
MEDIUM Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element. CWE-20
 Improper Input Validation 
CVE-2009-3271 cpe:2.3:o:apple:iphone_os:3.0.1:* 2026-04-23 09:35
2009-09-22
Show GitHub Exploit DB Packet Storm
3580 -
7.8
HIGH The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service (NULL pointer dereference and serv… CWE-399
 Resource Management Errors
CVE-2009-2815 cpe:2.3:o:apple:iphone_os:3.0:*
cpe:2.3:o:apple:iphone_os:2.2:*
cpe:2.3:o:apple:iphone_os:2.2.1:*
cpe:2.3:o:ap…
3.0.1 2026-04-23 09:35
2009-09-11
Show GitHub Exploit DB Packet Storm