{"schema_version":1,"title":"Apple Ios vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 206 vulnerabilities in Apple Ios: 8 in the last 7 days and 205 in the last 90 days, 3 of them critical and 2 exploited in the wild. The most recent, CVE-2026-113970, was published on 9 November 2026. 196 vulnerabilities in the last four weeks, up 19500% on the four before (1). 1 critical against 1, 1 exploited in the wild against 1.","url":"https://junglewise.ai/threats/technologies/apple-ios","json_url":"https://junglewise.ai/threats/technologies/apple-ios.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/apple-ios","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":11,"all_time":206,"critical":3,"exploited":2,"last_7_days":8,"last_30_days":204,"last_90_days":205,"last_365_days":205},"latest":[{"cve":"CVE-2026-113970","cvss":8.8,"slug":"cve-2026-113970-a-use-after-free-issue-was-addressed-with-improved-memory","title":"Apple Bluetooth use-after-free vulnerability","severity":"high","exploited":false,"published_at":"2026-11-09T22:18:26.903+00:00","url":"https://junglewise.ai/threats/cve-2026-113970-a-use-after-free-issue-was-addressed-with-improved-memory"},{"cve":"CVE-2026-113969","epss":0.0022,"slug":"cve-2026-113969-a-logic-issue-was-addressed-with-improved-state-management-this","title":"Apple iOS, iPadOS, macOS, and related platforms rate limit bypass in AirPlay pairing","severity":"info","exploited":false,"published_at":"2026-11-09T22:18:26.8+00:00","url":"https://junglewise.ai/threats/cve-2026-113969-a-logic-issue-was-addressed-with-improved-state-management-this"},{"cve":"CVE-2026-113968","cvss":5.4,"epss":0.0032,"slug":"cve-2026-113968-a-logic-issue-was-addressed-with-improved-state-management-this","title":"Apple iOS and iPadOS Bluetooth pairing code rate limit bypass","severity":"medium","exploited":false,"published_at":"2026-11-09T22:18:26.627+00:00","url":"https://junglewise.ai/threats/cve-2026-113968-a-logic-issue-was-addressed-with-improved-state-management-this"},{"cve":"CVE-2026-113965","cvss":5.4,"epss":0.003,"slug":"cve-2026-113965-this-issue-was-addressed-with-improved-checks-this-issue-is","title":"Apple iOS/iPadOS Bluetooth pairing bypass","severity":"medium","exploited":false,"published_at":"2026-11-09T22:18:26.457+00:00","url":"https://junglewise.ai/threats/cve-2026-113965-this-issue-was-addressed-with-improved-checks-this-issue-is"},{"cve":"CVE-2026-113964","cvss":5.4,"epss":0.0032,"slug":"cve-2026-113964-a-logic-issue-was-addressed-with-improved-state-management-this","title":"Apple iOS and iPadOS Bluetooth pairing rate limit bypass in CoreUtils","severity":"medium","exploited":false,"published_at":"2026-11-09T22:18:26.267+00:00","url":"https://junglewise.ai/threats/cve-2026-113964-a-logic-issue-was-addressed-with-improved-state-management-this"},{"cve":"CVE-2026-113963","cvss":5.5,"epss":0.0014,"slug":"cve-2026-113963-an-authorization-issue-was-addressed-with-improved-state","title":"Apple App Intents authorization issue in iOS, iPadOS, visionOS, watchOS","severity":"medium","exploited":false,"published_at":"2026-11-09T22:18:26.087+00:00","url":"https://junglewise.ai/threats/cve-2026-113963-an-authorization-issue-was-addressed-with-improved-state"},{"cve":"CVE-2026-113961","cvss":7.5,"epss":0.0061,"slug":"cve-2026-113961-an-authorization-issue-was-addressed-with-improved-validation","title":"Apple Messages authorization bypass in iMessage group chat","severity":"high","exploited":false,"published_at":"2026-11-09T22:18:25.917+00:00","url":"https://junglewise.ai/threats/cve-2026-113961-an-authorization-issue-was-addressed-with-improved-validation"},{"cve":"CVE-2026-113960","epss":0.0018,"slug":"cve-2026-113960-this-issue-was-addressed-by-removing-the-vulnerable-code-this","title":"Apple Messages message history disclosure in group chats","severity":"info","exploited":false,"published_at":"2026-11-09T22:18:25.76+00:00","url":"https://junglewise.ai/threats/cve-2026-113960-this-issue-was-addressed-by-removing-the-vulnerable-code-this"},{"cve":"CVE-2024-27834","epss":0.006,"slug":"cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability","title":"Apple iOS, iPadOS, macOS, Safari, tvOS, watchOS pointer authentication bypass","severity":"critical","exploited":true,"published_at":"2026-11-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability"},{"cve":"CVE-2026-86992","slug":"cve-2026-86992-the-issue-was-addressed-with-improved-memory-handling-this-issue","title":"Apple AppleAVD out-of-bounds write in video processing","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:38.22+00:00","url":"https://junglewise.ai/threats/cve-2026-86992-the-issue-was-addressed-with-improved-memory-handling-this-issue"},{"cve":"CVE-2026-86991","slug":"cve-2026-86991-a-buffer-overflow-was-addressed-with-improved-bounds-checking","title":"Apple Accelerate Framework buffer overflow in image processing","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:38.06+00:00","url":"https://junglewise.ai/threats/cve-2026-86991-a-buffer-overflow-was-addressed-with-improved-bounds-checking"},{"cve":"CVE-2026-86990","slug":"cve-2026-86990-an-access-issue-was-addressed-with-improved-access-restrictions","title":"Apple CoreMedia access issue in camera permission bypass","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:37.897+00:00","url":"https://junglewise.ai/threats/cve-2026-86990-an-access-issue-was-addressed-with-improved-access-restrictions"},{"cve":"CVE-2026-86989","slug":"cve-2026-86989-an-authorization-issue-was-addressed-with-improved-state","title":"Apple iOS authorization issue in App Store","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:37.723+00:00","url":"https://junglewise.ai/threats/cve-2026-86989-an-authorization-issue-was-addressed-with-improved-state"},{"cve":"CVE-2026-86988","slug":"cve-2026-86988-the-issue-was-addressed-with-improved-checks-this-issue-is-fixed","title":"Apple iOS image processing memory disclosure","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:37.543+00:00","url":"https://junglewise.ai/threats/cve-2026-86988-the-issue-was-addressed-with-improved-checks-this-issue-is-fixed"},{"cve":"CVE-2026-86987","slug":"cve-2026-86987-an-authorization-issue-was-addressed-with-improved-entitlement","title":"Apple iOS authorization issue in Apple Intelligence","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:37.35+00:00","url":"https://junglewise.ai/threats/cve-2026-86987-an-authorization-issue-was-addressed-with-improved-entitlement"},{"cve":"CVE-2026-86986","slug":"cve-2026-86986-a-use-after-free-issue-was-addressed-with-improved-memory","title":"Safari use-after-free in memory management","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:37.163+00:00","url":"https://junglewise.ai/threats/cve-2026-86986-a-use-after-free-issue-was-addressed-with-improved-memory"},{"cve":"CVE-2026-86985","slug":"cve-2026-86985-this-issue-was-addressed-with-improved-input-validation-this","title":"Apple Safari input validation vulnerability","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:37.003+00:00","url":"https://junglewise.ai/threats/cve-2026-86985-this-issue-was-addressed-with-improved-input-validation-this"},{"cve":"CVE-2026-86974","slug":"cve-2026-86974-a-type-confusion-issue-was-addressed-with-improved-checks-this","title":"Apple Safari and OS type confusion in WebContent processing","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:35.757+00:00","url":"https://junglewise.ai/threats/cve-2026-86974-a-type-confusion-issue-was-addressed-with-improved-checks-this"},{"cve":"CVE-2026-86973","slug":"cve-2026-86973-an-out-of-bounds-read-was-addressed-with-improved-bounds-checking","title":"Apple Safari out-of-bounds read in web content processing","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:35.6+00:00","url":"https://junglewise.ai/threats/cve-2026-86973-an-out-of-bounds-read-was-addressed-with-improved-bounds-checking"},{"cve":"CVE-2026-86972","slug":"cve-2026-86972-a-buffer-overflow-was-addressed-with-improved-size-validation","title":"Apple iOS and iPadOS buffer overflow in audio processing","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:35.437+00:00","url":"https://junglewise.ai/threats/cve-2026-86972-a-buffer-overflow-was-addressed-with-improved-size-validation"},{"cve":"CVE-2026-86971","slug":"cve-2026-86971-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds","title":"Apple iOS Accelerate Framework out-of-bounds write","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:35.263+00:00","url":"https://junglewise.ai/threats/cve-2026-86971-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds"},{"cve":"CVE-2026-86970","slug":"cve-2026-86970-an-out-of-bounds-read-was-addressed-with-improved-input","title":"Apple iOS out-of-bounds read in font processing","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:35.103+00:00","url":"https://junglewise.ai/threats/cve-2026-86970-an-out-of-bounds-read-was-addressed-with-improved-input"},{"cve":"CVE-2026-86969","slug":"cve-2026-86969-an-out-of-bounds-write-was-addressed-with-improved-input","title":"Apple iOS and iPadOS out-of-bounds write in kernel memory","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:34.943+00:00","url":"https://junglewise.ai/threats/cve-2026-86969-an-out-of-bounds-write-was-addressed-with-improved-input"},{"cve":"CVE-2026-86968","slug":"cve-2026-86968-an-access-issue-was-addressed-with-improved-access-control-this","title":"Apple iOS access control bypass in system interfaces","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:34.78+00:00","url":"https://junglewise.ai/threats/cve-2026-86968-an-access-issue-was-addressed-with-improved-access-control-this"},{"cve":"CVE-2026-86966","slug":"cve-2026-86966-this-issue-was-addressed-with-improved-handling-of-symlinks-this","title":"Apple operating systems symlink handling privilege escalation","severity":"info","exploited":false,"published_at":"2026-10-26T21:20:34.623+00:00","url":"https://junglewise.ai/threats/cve-2026-86966-this-issue-was-addressed-with-improved-handling-of-symlinks-this"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":1,"exploited":1,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":20},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":175},{"week":"2026-11-02","critical":1,"exploited":1,"vulnerabilities":1},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":8}],"related":[{"name":"Apple macOS","slug":"macos","vulnerabilities":1496,"url":"https://junglewise.ai/threats/technologies/macos"},{"name":"Apple iPadOS","slug":"ipados","vulnerabilities":739,"url":"https://junglewise.ai/threats/technologies/ipados"},{"name":"Apple visionOS","slug":"visionos","vulnerabilities":457,"url":"https://junglewise.ai/threats/technologies/visionos"},{"name":"Apple macOS Golden Gate","slug":"macos-golden-gate","vulnerabilities":449,"url":"https://junglewise.ai/threats/technologies/macos-golden-gate"},{"name":"Apple watchOS","slug":"watchos","vulnerabilities":386,"url":"https://junglewise.ai/threats/technologies/watchos"},{"name":"Apple tvOS","slug":"tvos","vulnerabilities":353,"url":"https://junglewise.ai/threats/technologies/tvos"},{"name":"Apple Iphone Os","slug":"iphone-os","vulnerabilities":203,"url":"https://junglewise.ai/threats/technologies/iphone-os"},{"name":"Apple Safari","slug":"safari","vulnerabilities":189,"url":"https://junglewise.ai/threats/technologies/safari"},{"name":"Apple Multiple Products","slug":"multiple-products","vulnerabilities":77,"url":"https://junglewise.ai/threats/technologies/multiple-products"},{"name":"Apple macOS Ventura","slug":"macos-ventura","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/macos-ventura"},{"name":"Apple macOS Monterey","slug":"macos-monterey","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/macos-monterey"},{"name":"Apple Xcode","slug":"xcode","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/xcode"}],"technology":{"hub":true,"name":"Apple Ios","slug":"apple-ios","vendor":{"hub":true,"name":"Apple","slug":"apple","url":"https://junglewise.ai/threats/vendors/apple"},"aliases":[],"category":"os","homepage":"https://www.apple.com/ios/","description":"Apple's mobile operating system for iPhone and iPad devices.","url":"https://junglewise.ai/threats/technologies/apple-ios"},"most_severe":[{"cve":"CVE-2026-86950","cvss":8.8,"epss":0.0081,"slug":"cve-2026-86950-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds","title":"Apple CoreGraphics out-of-bounds write in file processing","severity":"critical","exploited":true,"published_at":"2026-09-28T20:17:11.193+00:00","url":"https://junglewise.ai/threats/cve-2026-86950-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds"},{"cve":"CVE-2024-27834","epss":0.006,"slug":"cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability","title":"Apple iOS, iPadOS, macOS, Safari, tvOS, watchOS pointer authentication bypass","severity":"critical","exploited":true,"published_at":"2026-11-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-27834-apple-multiple-products-improper-authentication-vulnerability"},{"cve":"CVE-2025-6965","cvss":9.8,"epss":0.7255,"slug":"cve-2025-6965-sqlite-memory-corruption-via-aggregate-term-overflow","title":"SQLite memory corruption via aggregate term overflow","severity":"critical","exploited":false,"published_at":"2025-07-15T14:15:31.08+00:00","url":"https://junglewise.ai/threats/cve-2025-6965-sqlite-memory-corruption-via-aggregate-term-overflow"},{"cve":"CVE-2026-113970","cvss":8.8,"slug":"cve-2026-113970-a-use-after-free-issue-was-addressed-with-improved-memory","title":"Apple Bluetooth use-after-free vulnerability","severity":"high","exploited":false,"published_at":"2026-11-09T22:18:26.903+00:00","url":"https://junglewise.ai/threats/cve-2026-113970-a-use-after-free-issue-was-addressed-with-improved-memory"},{"cve":"CVE-2026-64759","cvss":8.8,"slug":"cve-2026-64759-an-integer-overflow-was-addressed-with-improved-input-validation","title":"Apple iOS integer overflow in image processing","severity":"high","exploited":false,"published_at":"2026-10-26T21:18:33.897+00:00","url":"https://junglewise.ai/threats/cve-2026-64759-an-integer-overflow-was-addressed-with-improved-input-validation"},{"cve":"CVE-2026-112688","cvss":8.8,"slug":"cve-2026-112688-a-memory-corruption-issue-was-addressed-with-improved-memory","title":"Apple iOS and iPadOS memory corruption in file parsing","severity":"high","exploited":false,"published_at":"2026-10-26T21:18:03.177+00:00","url":"https://junglewise.ai/threats/cve-2026-112688-a-memory-corruption-issue-was-addressed-with-improved-memory"},{"cve":"CVE-2026-112659","cvss":8.8,"slug":"cve-2026-112659-a-type-confusion-issue-was-addressed-with-improved-memory","title":"Apple Safari type confusion in memory handling","severity":"high","exploited":false,"published_at":"2026-10-26T21:17:59.497+00:00","url":"https://junglewise.ai/threats/cve-2026-112659-a-type-confusion-issue-was-addressed-with-improved-memory"},{"cve":"CVE-2026-112655","cvss":8.8,"slug":"cve-2026-112655-a-use-after-free-issue-was-addressed-with-improved-memory","title":"Apple Safari use-after-free in memory management","severity":"high","exploited":false,"published_at":"2026-10-26T21:17:59.02+00:00","url":"https://junglewise.ai/threats/cve-2026-112655-a-use-after-free-issue-was-addressed-with-improved-memory"},{"cve":"CVE-2026-112651","cvss":8.8,"slug":"cve-2026-112651-a-use-after-free-issue-was-addressed-with-improved-memory","title":"Safari use-after-free in web content handling","severity":"high","exploited":false,"published_at":"2026-10-26T21:17:58.397+00:00","url":"https://junglewise.ai/threats/cve-2026-112651-a-use-after-free-issue-was-addressed-with-improved-memory"},{"cve":"CVE-2026-112637","cvss":8.8,"slug":"cve-2026-112637-a-use-after-free-issue-was-addressed-with-improved-memory","title":"Apple Safari use-after-free in memory management","severity":"high","exploited":false,"published_at":"2026-10-26T21:17:57.297+00:00","url":"https://junglewise.ai/threats/cve-2026-112637-a-use-after-free-issue-was-addressed-with-improved-memory"}],"generated_at":"2026-11-11T03:07:00.183524+00:00"}