<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent vulnerabilities of iOS</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Vulnerabilities published under the CPE names of iOS.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 14 Sep 2026 12:38:04 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-20643</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-20643</link>
      <description>A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadOS, and macOS, Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may bypass Same Origin Policy.</description>
      <content:encoded>A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadOS, and macOS, Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may bypass Same Origin Policy.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-20643</guid>
      <pubDate>Tue, 17 Mar 2026 22:29:48 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2022-32872</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2022-32872</link>
      <description>A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. A person with physical access to an iOS device may be able to access photos from the lock screen.</description>
      <content:encoded>A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. A person with physical access to an iOS device may be able to access photos from the lock screen.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2022-32872</guid>
      <pubDate>Tue, 20 Sep 2022 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2022-32912</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2022-32912</link>
      <description>An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.</description>
      <content:encoded>An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2022-32912</guid>
      <pubDate>Tue, 20 Sep 2022 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2020-9819</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2020-9819</link>
      <description>A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.</description>
      <content:encoded>A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2020-9819</guid>
      <pubDate>Tue, 09 Jun 2020 16:12:28 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2020-9818</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2020-9818</link>
      <description>An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.</description>
      <content:encoded>An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2020-9818</guid>
      <pubDate>Tue, 09 Jun 2020 16:12:39 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2019-6223</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2019-6223</link>
      <description>A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.</description>
      <content:encoded>A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2019-6223</guid>
      <pubDate>Tue, 05 Mar 2019 16:00:00 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2019-7287</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2019-7287</link>
      <description>A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges.</description>
      <content:encoded>A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2019-7287</guid>
      <pubDate>Wed, 18 Dec 2019 17:33:15 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2019-7286</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2019-7286</link>
      <description>A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.</description>
      <content:encoded>A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2019-7286</guid>
      <pubDate>Wed, 18 Dec 2019 17:33:16 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2019-8506</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2019-8506</link>
      <description>A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.</description>
      <content:encoded>A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2019-8506</guid>
      <pubDate>Wed, 18 Dec 2019 17:33:16 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2019-8605</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2019-8605</link>
      <description>A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.</description>
      <content:encoded>A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2019-8605</guid>
      <pubDate>Wed, 18 Dec 2019 17:33:18 +0000</pubDate>
    </item>
  </channel>
</rss>
