# Apple Iphone Os vulnerabilities

Source: https://junglewise.ai/threats/technologies/iphone-os  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/iphone-os.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 203 vulnerabilities in Apple Iphone Os: 0 in the last 7 days and 91 in the last 90 days, 10 of them critical and 2 exploited in the wild. The most recent, CVE-2026-91742, was published on 15 September 2026. Nothing in the last four weeks, down from 64 vulnerabilities in the four before. 0 critical against 1.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 91
- All time: 203 (10 critical, 2 exploited in the wild)

## About Apple Iphone Os

Apple's mobile operating system for iPhone devices.

## Latest Apple Iphone Os vulnerabilities

- [CVE-2026-91742: Google Chrome iOS PriceTracking confused deputy bypass](https://junglewise.ai/threats/cve-2026-91742-google-chrome-ios-pricetracking-confused-deputy-bypass) (medium, CVSS 4.8, published 15 Sep 2026)
- [CVE-2026-86924: Apple iOS and iPadOS memory corruption via malicious accessory](https://junglewise.ai/threats/cve-2026-86924-apple-ios-and-ipados-memory-corruption-via-malicious-accessory) (medium, CVSS 5.5, published 14 Sep 2026)
- [CVE-2026-86905: Apple Keychain unauthorized credential deletion vulnerability](https://junglewise.ai/threats/cve-2026-86905-apple-keychain-unauthorized-credential-deletion-vulnerability) (medium, CVSS 5.5, published 14 Sep 2026)
- [CVE-2026-86904: Apple iOS iPadOS watchOS cross-app tracking privacy issue](https://junglewise.ai/threats/cve-2026-86904-apple-ios-ipados-watchos-cross-app-tracking-privacy-issue) (high, CVSS 7.5, published 14 Sep 2026)
- [CVE-2026-86903: Apple iOS out-of-bounds read in kernel memory](https://junglewise.ai/threats/cve-2026-86903-apple-ios-out-of-bounds-read-in-kernel-memory) (medium, CVSS 5.5, published 14 Sep 2026)
- [CVE-2026-86898: Apple Safari universal cross-site scripting in webarchive handling](https://junglewise.ai/threats/cve-2026-86898-apple-safari-universal-cross-site-scripting-in-webarchive) (medium, CVSS 5.4, published 14 Sep 2026)
- [CVE-2026-86897: Apple Accessibility entitlement check bypass in iOS and macOS](https://junglewise.ai/threats/cve-2026-86897-apple-accessibility-entitlement-check-bypass-in-ios-and-macos) (medium, CVSS 5.5, published 14 Sep 2026)
- [CVE-2026-86895: Apple CloudKit information disclosure in persistent account identifiers](https://junglewise.ai/threats/cve-2026-86895-apple-cloudkit-information-disclosure-in-persistent-account) (high, CVSS 7.5, published 14 Sep 2026)
- [CVE-2026-86893: Apple iOS/iPadOS/tvOS/visionOS/watchOS permissions issue in CloudKit](https://junglewise.ai/threats/cve-2026-86893-apple-ios-ipados-tvos-visionos-watchos-permissions-issue-in) (low, CVSS 3.3, published 14 Sep 2026)
- [CVE-2026-86892: Apple iOS entitlement validation denial of service](https://junglewise.ai/threats/cve-2026-86892-apple-ios-entitlement-validation-denial-of-service) (medium, CVSS 5.5, published 14 Sep 2026)
- [CVE-2026-86890: Apple iOS and iPadOS logic issue in locked device access](https://junglewise.ai/threats/cve-2026-86890-apple-ios-and-ipados-logic-issue-in-locked-device-access) (medium, CVSS 4.6, published 14 Sep 2026)
- [CVE-2026-86888: Apple App Store permissions issue allowing persistent account identifier exposure](https://junglewise.ai/threats/cve-2026-86888-apple-app-store-permissions-issue-allowing-persistent-account) (low, CVSS 3.3, published 14 Sep 2026)
- [CVE-2026-86887: Apple iOS privacy issue allowing app bypass of user preferences](https://junglewise.ai/threats/cve-2026-86887-apple-ios-privacy-issue-allowing-app-bypass-of-user-preferences) (low, CVSS 3.3, published 14 Sep 2026)
- [CVE-2026-86886: Apple iOS path traversal in system file access](https://junglewise.ai/threats/cve-2026-86886-apple-ios-path-traversal-in-system-file-access) (medium, CVSS 5.5, published 14 Sep 2026)
- [CVE-2026-86885: Apple iOS input validation issue in wireless radio component](https://junglewise.ai/threats/cve-2026-86885-apple-ios-input-validation-issue-in-wireless-radio-component) (medium, CVSS 6.5, published 14 Sep 2026)
- [CVE-2026-86884: Apple iOS and iPadOS App Store permissions issue](https://junglewise.ai/threats/cve-2026-86884-apple-ios-and-ipados-app-store-permissions-issue) (medium, CVSS 5.5, published 14 Sep 2026)
- [CVE-2026-86883: Apple iOS Accessibility privacy issue in file handling](https://junglewise.ai/threats/cve-2026-86883-apple-ios-accessibility-privacy-issue-in-file-handling) (medium, CVSS 5.5, published 14 Sep 2026)
- [CVE-2026-86879: Apple iOS and iPadOS input validation denial-of-service](https://junglewise.ai/threats/cve-2026-86879-apple-ios-and-ipados-input-validation-denial-of-service) (medium, CVSS 6.5, published 14 Sep 2026)
- [CVE-2026-86878: Apple iOS and iPadOS permissions issue allowing sensitive data access](https://junglewise.ai/threats/cve-2026-86878-apple-ios-and-ipados-permissions-issue-allowing-sensitive-data) (medium, CVSS 5.5, published 14 Sep 2026)
- [CVE-2026-86870: Apple iOS, iPadOS, macOS, visionOS, watchOS heap buffer overflow in Accelerate Framework](https://junglewise.ai/threats/cve-2026-86870-apple-ios-ipados-macos-visionos-watchos-heap-buffer-overflow-in) (medium, CVSS 6.5, published 14 Sep 2026)
- [CVE-2026-86869: Apple Accelerate Framework out-of-bounds write in image processing](https://junglewise.ai/threats/cve-2026-86869-apple-accelerate-framework-out-of-bounds-write-in-image) (medium, CVSS 6.5, published 14 Sep 2026)
- [CVE-2026-84636: Apple iOS authorization bypass in state management](https://junglewise.ai/threats/cve-2026-84636-apple-ios-authorization-bypass-in-state-management) (medium, CVSS 5.5, published 14 Sep 2026)
- [CVE-2026-84635: Apple Safari logic issue in state management](https://junglewise.ai/threats/cve-2026-84635-apple-safari-logic-issue-in-state-management) (medium, CVSS 6.5, published 14 Sep 2026)
- [CVE-2026-84629: Apple iOS and iPadOS user fingerprinting vulnerability](https://junglewise.ai/threats/cve-2026-84629-apple-ios-and-ipados-user-fingerprinting-vulnerability) (high, CVSS 7.5, published 14 Sep 2026)
- [CVE-2026-84628: Apple iOS Keychain access bypass in Accounts](https://junglewise.ai/threats/cve-2026-84628-apple-ios-keychain-access-bypass-in-accounts) (medium, CVSS 5.5, published 14 Sep 2026)

## Most severe Apple Iphone Os vulnerabilities

- [CVE-2025-31277: Apple Multiple Products memory corruption in web content processing](https://junglewise.ai/threats/cve-2025-31277-apple-multiple-products-memory-corruption-in-web-content) (critical, exploited in the wild, CVSS 8.8, published 30 Jul 2025)
- [CVE-2022-2294: WebRTC Heap Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2022-2294-webrtc-heap-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 25 Aug 2022)
- [CVE-2025-6965: SQLite memory corruption via aggregate term overflow](https://junglewise.ai/threats/cve-2025-6965-sqlite-memory-corruption-via-aggregate-term-overflow) (critical, CVSS 9.8, published 15 Jul 2025)
- [CVE-2026-30783: RustDesk Client privilege abuse via unauthenticated strategy injection](https://junglewise.ai/threats/cve-2026-30783-rustdesk-client-privilege-abuse-via-unauthenticated-strategy) (critical, CVSS 9.8, published 5 Mar 2026)
- [CVE-2026-30789: RustDesk Client authentication bypass via session replay and weak hashing](https://junglewise.ai/threats/cve-2026-30789-rustdesk-client-authentication-bypass-via-session-replay-and-weak) (critical, CVSS 9.8, published 5 Mar 2026)
- [CVE-2026-78935: Google Chrome use of uninitialized variable in Mobile](https://junglewise.ai/threats/cve-2026-78935-google-chrome-use-of-uninitialized-variable-in-mobile) (critical, CVSS 9.6, published 25 Aug 2026)
- [CVE-2026-85047: Google Chrome improper input validation in Transactions Platform on iOS](https://junglewise.ai/threats/cve-2026-85047-google-chrome-improper-input-validation-in-transactions-platform) (critical, CVSS 9.6, published 3 Sep 2026)
- [CVE-2026-78964: Google Chrome use after free in Sync on iOS](https://junglewise.ai/threats/cve-2026-78964-google-chrome-use-after-free-in-sync-on-ios) (critical, CVSS 9.6, published 25 Aug 2026)
- [CVE-2026-87609: Google Chrome use-after-free in Sharing on iOS](https://junglewise.ai/threats/cve-2026-87609-google-chrome-use-after-free-in-sharing-on-ios) (critical, CVSS 9.6, published 9 Sep 2026)
- [CVE-2026-84625: Apple iOS permissions issue allowing user fingerprinting](https://junglewise.ai/threats/cve-2026-84625-apple-ios-permissions-issue-allowing-user-fingerprinting) (critical, CVSS 9.1, published 14 Sep 2026)

## Vulnerabilities per week

Nothing in the last four weeks, down from 64 vulnerabilities in the four before. 0 critical against 1.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 12 | 0 | 0 |
| 24 Aug 2026 | 9 | 2 | 0 |
| 31 Aug 2026 | 1 | 1 | 0 |
| 7 Sep 2026 | 5 | 1 | 0 |
| 14 Sep 2026 | 64 | 1 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Apple technologies

- [Apple macOS](https://junglewise.ai/threats/technologies/macos): 1,496 vulnerabilities
- [Apple iPadOS](https://junglewise.ai/threats/technologies/ipados): 739 vulnerabilities
- [Apple visionOS](https://junglewise.ai/threats/technologies/visionos): 457 vulnerabilities
- [Apple macOS Golden Gate](https://junglewise.ai/threats/technologies/macos-golden-gate): 449 vulnerabilities
- [Apple watchOS](https://junglewise.ai/threats/technologies/watchos): 386 vulnerabilities
- [Apple tvOS](https://junglewise.ai/threats/technologies/tvos): 353 vulnerabilities
- [Apple Ios](https://junglewise.ai/threats/technologies/apple-ios): 206 vulnerabilities
- [Apple Safari](https://junglewise.ai/threats/technologies/safari): 189 vulnerabilities
- [Apple Multiple Products](https://junglewise.ai/threats/technologies/multiple-products): 77 vulnerabilities
- [Apple macOS Ventura](https://junglewise.ai/threats/technologies/macos-ventura): 27 vulnerabilities
- [Apple macOS Monterey](https://junglewise.ai/threats/technologies/macos-monterey): 24 vulnerabilities
- [Apple Xcode](https://junglewise.ai/threats/technologies/xcode): 9 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Apple Iphone Os vulnerabilities", https://junglewise.ai/threats/technologies/iphone-os, 12 November 2026.