{"schema_version":1,"title":"Apple Iphone Os vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 165 vulnerabilities in Apple Iphone Os: 0 in the last 7 days and 91 in the last 90 days, 10 of them critical and 2 exploited in the wild. The most recent, CVE-2026-91742, was published on 15 September 2026.","url":"https://junglewise.ai/threats/technologies/iphone-os","json_url":"https://junglewise.ai/threats/technologies/iphone-os.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/iphone-os","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":42,"all_time":165,"critical":10,"exploited":2,"last_7_days":0,"last_30_days":70,"last_90_days":91,"last_365_days":157},"latest":[{"cve":"CVE-2026-91742","cvss":4.8,"epss":0.002,"slug":"cve-2026-91742-google-chrome-ios-pricetracking-confused-deputy-bypass","title":"Google Chrome iOS PriceTracking confused deputy bypass","severity":"medium","exploited":false,"published_at":"2026-09-15T21:16:47.89+00:00","url":"https://junglewise.ai/threats/cve-2026-91742-google-chrome-ios-pricetracking-confused-deputy-bypass"},{"cve":"CVE-2026-86924","cvss":5.5,"epss":0.0016,"slug":"cve-2026-86924-apple-ios-and-ipados-memory-corruption-via-malicious-accessory","title":"Apple iOS and iPadOS memory corruption via malicious accessory","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.863+00:00","url":"https://junglewise.ai/threats/cve-2026-86924-apple-ios-and-ipados-memory-corruption-via-malicious-accessory"},{"cve":"CVE-2026-86905","cvss":5.5,"epss":0.0014,"slug":"cve-2026-86905-apple-keychain-unauthorized-credential-deletion-vulnerability","title":"Apple Keychain unauthorized credential deletion vulnerability","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.353+00:00","url":"https://junglewise.ai/threats/cve-2026-86905-apple-keychain-unauthorized-credential-deletion-vulnerability"},{"cve":"CVE-2026-86904","cvss":7.5,"epss":0.0043,"slug":"cve-2026-86904-apple-ios-ipados-watchos-cross-app-tracking-privacy-issue","title":"Apple iOS iPadOS watchOS cross-app tracking privacy issue","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:41.247+00:00","url":"https://junglewise.ai/threats/cve-2026-86904-apple-ios-ipados-watchos-cross-app-tracking-privacy-issue"},{"cve":"CVE-2026-86903","cvss":5.5,"epss":0.0016,"slug":"cve-2026-86903-apple-ios-out-of-bounds-read-in-kernel-memory","title":"Apple iOS out-of-bounds read in kernel memory","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.14+00:00","url":"https://junglewise.ai/threats/cve-2026-86903-apple-ios-out-of-bounds-read-in-kernel-memory"},{"cve":"CVE-2026-86898","cvss":5.4,"epss":0.0025,"slug":"cve-2026-86898-apple-safari-universal-cross-site-scripting-in-webarchive","title":"Apple Safari universal cross-site scripting in webarchive handling","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:40.71+00:00","url":"https://junglewise.ai/threats/cve-2026-86898-apple-safari-universal-cross-site-scripting-in-webarchive"},{"cve":"CVE-2026-86897","cvss":5.5,"epss":0.0016,"slug":"cve-2026-86897-apple-accessibility-entitlement-check-bypass-in-ios-and-macos","title":"Apple Accessibility entitlement check bypass in iOS and macOS","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:40.587+00:00","url":"https://junglewise.ai/threats/cve-2026-86897-apple-accessibility-entitlement-check-bypass-in-ios-and-macos"},{"cve":"CVE-2026-86895","cvss":7.5,"epss":0.0047,"slug":"cve-2026-86895-apple-cloudkit-information-disclosure-in-persistent-account","title":"Apple CloudKit information disclosure in persistent account identifiers","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:40.473+00:00","url":"https://junglewise.ai/threats/cve-2026-86895-apple-cloudkit-information-disclosure-in-persistent-account"},{"cve":"CVE-2026-86893","cvss":3.3,"epss":0.0014,"slug":"cve-2026-86893-apple-ios-ipados-tvos-visionos-watchos-permissions-issue-in","title":"Apple iOS/iPadOS/tvOS/visionOS/watchOS permissions issue in CloudKit","severity":"low","exploited":false,"published_at":"2026-09-14T21:17:40.263+00:00","url":"https://junglewise.ai/threats/cve-2026-86893-apple-ios-ipados-tvos-visionos-watchos-permissions-issue-in"},{"cve":"CVE-2026-86892","cvss":5.5,"epss":0.0015,"slug":"cve-2026-86892-apple-ios-entitlement-validation-denial-of-service","title":"Apple iOS entitlement validation denial of service","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:40.16+00:00","url":"https://junglewise.ai/threats/cve-2026-86892-apple-ios-entitlement-validation-denial-of-service"},{"cve":"CVE-2026-86890","cvss":4.6,"epss":0.0021,"slug":"cve-2026-86890-apple-ios-and-ipados-logic-issue-in-locked-device-access","title":"Apple iOS and iPadOS logic issue in locked device access","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.963+00:00","url":"https://junglewise.ai/threats/cve-2026-86890-apple-ios-and-ipados-logic-issue-in-locked-device-access"},{"cve":"CVE-2026-86888","cvss":3.3,"epss":0.0014,"slug":"cve-2026-86888-apple-app-store-permissions-issue-allowing-persistent-account","title":"Apple App Store permissions issue allowing persistent account identifier exposure","severity":"low","exploited":false,"published_at":"2026-09-14T21:17:39.757+00:00","url":"https://junglewise.ai/threats/cve-2026-86888-apple-app-store-permissions-issue-allowing-persistent-account"},{"cve":"CVE-2026-86887","cvss":3.3,"epss":0.0016,"slug":"cve-2026-86887-apple-ios-privacy-issue-allowing-app-bypass-of-user-preferences","title":"Apple iOS privacy issue allowing app bypass of user preferences","severity":"low","exploited":false,"published_at":"2026-09-14T21:17:39.66+00:00","url":"https://junglewise.ai/threats/cve-2026-86887-apple-ios-privacy-issue-allowing-app-bypass-of-user-preferences"},{"cve":"CVE-2026-86886","cvss":5.5,"epss":0.0017,"slug":"cve-2026-86886-apple-ios-path-traversal-in-system-file-access","title":"Apple iOS path traversal in system file access","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.553+00:00","url":"https://junglewise.ai/threats/cve-2026-86886-apple-ios-path-traversal-in-system-file-access"},{"cve":"CVE-2026-86885","cvss":6.5,"epss":0.0025,"slug":"cve-2026-86885-apple-ios-input-validation-issue-in-wireless-radio-component","title":"Apple iOS input validation issue in wireless radio component","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.447+00:00","url":"https://junglewise.ai/threats/cve-2026-86885-apple-ios-input-validation-issue-in-wireless-radio-component"},{"cve":"CVE-2026-86884","cvss":5.5,"epss":0.0014,"slug":"cve-2026-86884-apple-ios-and-ipados-app-store-permissions-issue","title":"Apple iOS and iPadOS App Store permissions issue","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.34+00:00","url":"https://junglewise.ai/threats/cve-2026-86884-apple-ios-and-ipados-app-store-permissions-issue"},{"cve":"CVE-2026-86883","cvss":5.5,"epss":0.0015,"slug":"cve-2026-86883-apple-ios-accessibility-privacy-issue-in-file-handling","title":"Apple iOS Accessibility privacy issue in file handling","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.23+00:00","url":"https://junglewise.ai/threats/cve-2026-86883-apple-ios-accessibility-privacy-issue-in-file-handling"},{"cve":"CVE-2026-86879","cvss":6.5,"epss":0.0039,"slug":"cve-2026-86879-apple-ios-and-ipados-input-validation-denial-of-service","title":"Apple iOS and iPadOS input validation denial-of-service","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.893+00:00","url":"https://junglewise.ai/threats/cve-2026-86879-apple-ios-and-ipados-input-validation-denial-of-service"},{"cve":"CVE-2026-86878","cvss":5.5,"epss":0.0015,"slug":"cve-2026-86878-apple-ios-and-ipados-permissions-issue-allowing-sensitive-data","title":"Apple iOS and iPadOS permissions issue allowing sensitive data access","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.797+00:00","url":"https://junglewise.ai/threats/cve-2026-86878-apple-ios-and-ipados-permissions-issue-allowing-sensitive-data"},{"cve":"CVE-2026-86870","cvss":6.5,"epss":0.0045,"slug":"cve-2026-86870-apple-ios-ipados-macos-visionos-watchos-heap-buffer-overflow-in","title":"Apple iOS, iPadOS, macOS, visionOS, watchOS heap buffer overflow in Accelerate Framework","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.58+00:00","url":"https://junglewise.ai/threats/cve-2026-86870-apple-ios-ipados-macos-visionos-watchos-heap-buffer-overflow-in"},{"cve":"CVE-2026-86869","cvss":6.5,"epss":0.0034,"slug":"cve-2026-86869-apple-accelerate-framework-out-of-bounds-write-in-image","title":"Apple Accelerate Framework out-of-bounds write in image processing","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.48+00:00","url":"https://junglewise.ai/threats/cve-2026-86869-apple-accelerate-framework-out-of-bounds-write-in-image"},{"cve":"CVE-2026-84636","cvss":5.5,"epss":0.0014,"slug":"cve-2026-84636-apple-ios-authorization-bypass-in-state-management","title":"Apple iOS authorization bypass in state management","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.377+00:00","url":"https://junglewise.ai/threats/cve-2026-84636-apple-ios-authorization-bypass-in-state-management"},{"cve":"CVE-2026-84635","cvss":6.5,"epss":0.0037,"slug":"cve-2026-84635-apple-safari-logic-issue-in-state-management","title":"Apple Safari logic issue in state management","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.26+00:00","url":"https://junglewise.ai/threats/cve-2026-84635-apple-safari-logic-issue-in-state-management"},{"cve":"CVE-2026-84629","cvss":7.5,"epss":0.0042,"slug":"cve-2026-84629-apple-ios-and-ipados-user-fingerprinting-vulnerability","title":"Apple iOS and iPadOS user fingerprinting vulnerability","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:37.84+00:00","url":"https://junglewise.ai/threats/cve-2026-84629-apple-ios-and-ipados-user-fingerprinting-vulnerability"},{"cve":"CVE-2026-84628","cvss":5.5,"epss":0.0016,"slug":"cve-2026-84628-apple-ios-keychain-access-bypass-in-accounts","title":"Apple iOS Keychain access bypass in Accounts","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:37.73+00:00","url":"https://junglewise.ai/threats/cve-2026-84628-apple-ios-keychain-access-bypass-in-accounts"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":12},{"week":"2026-08-24","critical":2,"exploited":0,"vulnerabilities":9},{"week":"2026-08-31","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-09-07","critical":1,"exploited":0,"vulnerabilities":5},{"week":"2026-09-14","critical":1,"exploited":0,"vulnerabilities":64},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Apple macOS","slug":"macos-tahoe","vulnerabilities":906,"url":"https://junglewise.ai/threats/technologies/macos-tahoe"},{"name":"Apple iPadOS","slug":"ipados","vulnerabilities":501,"url":"https://junglewise.ai/threats/technologies/ipados"},{"name":"Apple visionOS","slug":"visionos","vulnerabilities":291,"url":"https://junglewise.ai/threats/technologies/visionos"},{"name":"Apple watchOS","slug":"watchos","vulnerabilities":288,"url":"https://junglewise.ai/threats/technologies/watchos"},{"name":"Apple tvOS","slug":"tvos","vulnerabilities":260,"url":"https://junglewise.ai/threats/technologies/tvos"},{"name":"Apple macOS Golden Gate","slug":"macos-golden-gate","vulnerabilities":172,"url":"https://junglewise.ai/threats/technologies/macos-golden-gate"},{"name":"Apple Safari","slug":"safari","vulnerabilities":141,"url":"https://junglewise.ai/threats/technologies/safari"},{"name":"Apple Multiple Products","slug":"multiple-products","vulnerabilities":75,"url":"https://junglewise.ai/threats/technologies/multiple-products"},{"name":"Apple macOS Ventura","slug":"macos-ventura","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/macos-ventura"},{"name":"Apple macOS Monterey","slug":"macos-monterey","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/macos-monterey"},{"name":"Apple SwiftNIO","slug":"swiftnio","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/swiftnio"},{"name":"Apple Container","slug":"container","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/container"}],"technology":{"hub":true,"name":"Apple Iphone Os","slug":"iphone-os","vendor":{"name":"Apple","slug":"apple","url":"https://junglewise.ai/threats/vendors/apple"},"aliases":[],"homepage":"https://www.apple.com/ios/","description":"A mobile operating system developed by Apple for iPhone and iPod Touch devices.","url":"https://junglewise.ai/threats/technologies/iphone-os"},"most_severe":[{"cve":"CVE-2025-31277","cvss":8.8,"epss":0.0148,"slug":"cve-2025-31277-apple-multiple-products-memory-corruption-in-web-content","title":"Apple Multiple Products memory corruption in web content processing","severity":"critical","exploited":true,"published_at":"2025-07-30T00:15:30.83+00:00","url":"https://junglewise.ai/threats/cve-2025-31277-apple-multiple-products-memory-corruption-in-web-content"},{"cve":"CVE-2022-2294","cvss":8.8,"slug":"cve-2022-2294-webrtc-heap-buffer-overflow-vulnerability","title":"WebRTC Heap Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-2294-webrtc-heap-buffer-overflow-vulnerability"},{"cve":"CVE-2025-6965","cvss":9.8,"epss":0.7255,"slug":"cve-2025-6965-sqlite-memory-corruption-via-aggregate-term-overflow","title":"SQLite memory corruption via aggregate term overflow","severity":"critical","exploited":false,"published_at":"2025-07-15T14:15:31.08+00:00","url":"https://junglewise.ai/threats/cve-2025-6965-sqlite-memory-corruption-via-aggregate-term-overflow"},{"cve":"CVE-2026-30783","cvss":9.8,"epss":0.0059,"slug":"cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy","title":"RustDesk Client privilege abuse via unauthenticated strategy injection","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:18.91+00:00","url":"https://junglewise.ai/threats/cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy"},{"cve":"CVE-2026-30789","cvss":9.8,"epss":0.0042,"slug":"cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak","title":"RustDesk Client authentication bypass via session replay and weak hashing","severity":"critical","exploited":false,"published_at":"2026-03-05T16:16:19.56+00:00","url":"https://junglewise.ai/threats/cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak"},{"cve":"CVE-2026-78935","cvss":9.6,"epss":0.005,"slug":"cve-2026-78935-google-chrome-use-of-uninitialized-variable-in-mobile","title":"Google Chrome use of uninitialized variable in Mobile","severity":"critical","exploited":false,"published_at":"2026-08-25T21:17:49.27+00:00","url":"https://junglewise.ai/threats/cve-2026-78935-google-chrome-use-of-uninitialized-variable-in-mobile"},{"cve":"CVE-2026-85047","cvss":9.6,"epss":0.0046,"slug":"cve-2026-85047-google-chrome-improper-input-validation-in-transactions-platform","title":"Google Chrome improper input validation in Transactions Platform on iOS","severity":"critical","exploited":false,"published_at":"2026-09-03T20:17:24.69+00:00","url":"https://junglewise.ai/threats/cve-2026-85047-google-chrome-improper-input-validation-in-transactions-platform"},{"cve":"CVE-2026-78964","cvss":9.6,"epss":0.0046,"slug":"cve-2026-78964-google-chrome-use-after-free-in-sync-on-ios","title":"Google Chrome use after free in Sync on iOS","severity":"critical","exploited":false,"published_at":"2026-08-25T21:17:52.507+00:00","url":"https://junglewise.ai/threats/cve-2026-78964-google-chrome-use-after-free-in-sync-on-ios"},{"cve":"CVE-2026-87609","cvss":9.6,"epss":0.0043,"slug":"cve-2026-87609-google-chrome-use-after-free-in-sharing-on-ios","title":"Google Chrome use-after-free in Sharing on iOS","severity":"critical","exploited":false,"published_at":"2026-09-09T01:17:18.987+00:00","url":"https://junglewise.ai/threats/cve-2026-87609-google-chrome-use-after-free-in-sharing-on-ios"},{"cve":"CVE-2026-84625","cvss":9.1,"epss":0.0047,"slug":"cve-2026-84625-apple-ios-permissions-issue-allowing-user-fingerprinting","title":"Apple iOS permissions issue allowing user fingerprinting","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:37.523+00:00","url":"https://junglewise.ai/threats/cve-2026-84625-apple-ios-permissions-issue-allowing-user-fingerprinting"}],"generated_at":"2026-09-26T17:07:00.185783+00:00"}