# iOS security incidents · pwn.watch

> Security incidents tagged iOS (vendor, product, platform or attack type).

Page: https://pwn.watch/t/ios · generated 2026-10-22T16:53:33.742Z

## Status (as of 2026-10-22)
- Incidents: 28 (0 live, 0 live and not fully patched, 28 patched)
- Days without a iOS security incident: 2
- Newest incident started: 2026-10-20

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/ios.json
- RSS (one item per incident, bumped on each update): https://pwn.watch/t/ios/feed.xml
- This file: https://pwn.watch/t/ios/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Signal calls can stay live after hang-up (RingRTC CVE-2026-113380)](https://pwn.watch/i/signal-ringrtc-cve-2026-113380) ([json](https://pwn.watch/i/signal-ringrtc-cve-2026-113380.json)): critical, closed, patched, started 2026-10-20, CVE-2026-113380
- [Apple CoreGraphics zero-day CVE-2026-86950](https://pwn.watch/i/apple-coregraphics-cve-2026-86950) ([json](https://pwn.watch/i/apple-coregraphics-cve-2026-86950.json)): high, closed, patched, started 2026-09-29, CVE-2026-86950
- [Apple Multiple Products: Apple Multiple Products Improper Locking Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2025-43510) ([json](https://pwn.watch/i/apple-multiple-products-cve-2025-43510.json)): high, closed, patched, started 2026-03-20, CVE-2025-43510, CVE-2025-43520, CVE-2025-31277
- [Apple Multiple Products: Apple Multiple Buffer Overflow Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2026-20700) ([json](https://pwn.watch/i/apple-multiple-products-cve-2026-20700.json)): high, closed, patched, started 2026-02-12, CVE-2026-20700
- [Apple Multiple Products: Multiple Products Use-After-Free WebKit Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2025-43529) ([json](https://pwn.watch/i/apple-multiple-products-cve-2025-43529.json)): high, closed, patched, started 2025-12-15, CVE-2025-43529
- [Apple Multiple Products: Multiple Products Unspecified Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2022-48503) ([json](https://pwn.watch/i/apple-multiple-products-cve-2022-48503.json)): high, closed, patched, started 2025-10-20, CVE-2022-48503
- [Apple iOS, iPadOS, and macOS: iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability](https://pwn.watch/i/apple-ios-ipados-and-macos-cve-2025-43300) ([json](https://pwn.watch/i/apple-ios-ipados-and-macos-cve-2025-43300.json)): critical, closed, patched, started 2025-08-21, CVE-2025-43300
- [Apple Multiple Products: Multiple Products Unspecified Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2025-43200) ([json](https://pwn.watch/i/apple-multiple-products-cve-2025-43200.json)): medium, closed, patched, started 2025-06-16, CVE-2025-43200
- [Apple Multiple Products: 2 exploited vulnerabilities (CVE-2025-31200, CVE-2025-31201)](https://pwn.watch/i/apple-multiple-products-cve-2025-31200) ([json](https://pwn.watch/i/apple-multiple-products-cve-2025-31200.json)): critical, closed, patched, started 2025-04-17, CVE-2025-31200, CVE-2025-31201
- [Apple Multiple Products: Multiple Products WebKit Out-of-Bounds Write Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2025-24201) ([json](https://pwn.watch/i/apple-multiple-products-cve-2025-24201.json)): critical, closed, patched, started 2025-03-13, CVE-2025-24201
- [Apple iOS and iPadOS: iOS and iPadOS Incorrect Authorization Vulnerability](https://pwn.watch/i/apple-ios-and-ipados-cve-2025-24200) ([json](https://pwn.watch/i/apple-ios-and-ipados-cve-2025-24200.json)): medium, closed, patched, started 2025-02-12, CVE-2025-24200
- [Apple Multiple Products: Multiple Products Use-After-Free Vulnerability](https://pwn.watch/i/apple-multiple-products-cve-2025-24085) ([json](https://pwn.watch/i/apple-multiple-products-cve-2025-24085.json)): critical, closed, patched, started 2025-01-29, CVE-2025-24085
- [Apple Multiple Products: 2 actively exploited vulnerabilities](https://pwn.watch/i/apple-multiple-products-cve-2024-44308-44309) ([json](https://pwn.watch/i/apple-multiple-products-cve-2024-44308-44309.json)): high, closed, patched, started 2024-11-19, CVE-2024-44308, CVE-2024-44309
- [Apple Multiple Products: 2 actively exploited vulnerabilities](https://pwn.watch/i/apple-multiple-products-cve-2024-23225-23296) ([json](https://pwn.watch/i/apple-multiple-products-cve-2024-23225-23296.json)): high, closed, patched, started 2024-03-05, CVE-2024-23225, CVE-2024-23296
- [Apple Multiple Products WebKit Type Confusion](https://pwn.watch/i/apple-multiple-products-cve-2024-23222) ([json](https://pwn.watch/i/apple-multiple-products-cve-2024-23222.json)): high, closed, patched, started 2024-01-23, CVE-2024-23222
- [Apple Multiple Products Memory Corruption](https://pwn.watch/i/apple-multiple-products-cve-2022-48618) ([json](https://pwn.watch/i/apple-multiple-products-cve-2022-48618.json)): high, closed, patched, started 2024-01-09, CVE-2022-48618
- [Apple Multiple Products Code Execution](https://pwn.watch/i/apple-multiple-products-cve-2023-41990) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-41990.json)): high, closed, patched, started 2024-01-08, CVE-2023-41990
- [Apple Multiple Products: 2 exploited vulnerabilities (CVE-2023-42916, CVE-2023-42917)](https://pwn.watch/i/apple-multiple-products-cve-2023-42916-42917) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-42916-42917.json)): high, closed, patched, started 2023-12-04, CVE-2023-42916, CVE-2023-42917
- [Apple iOS and iPadOS: Kernel Privilege Escalation (CVE-2023-42824)](https://pwn.watch/i/apple-ios-and-ipados-cve-2023-42824) ([json](https://pwn.watch/i/apple-ios-and-ipados-cve-2023-42824.json)): high, closed, patched, started 2023-10-05, CVE-2023-42824
- [Apple Multiple Products: 3 exploited vulnerabilities (CVE-2023-41991, CVE-2023-41992, CVE-2023-41993)](https://pwn.watch/i/apple-multiple-products-cve-2023-41991-41992-41993) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-41991-41992-41993.json)): high, closed, patched, started 2023-09-25, CVE-2023-41991, CVE-2023-41992, CVE-2023-41993
- [BLASTPASS: NSO zero-click iPhone exploit chain (CVE-2023-41064, CVE-2023-41061)](https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061) ([json](https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061.json)): high, closed, patched, started 2023-09-07, CVE-2023-41064, CVE-2023-41061
- [Apple Multiple Products: WebKit Code Execution (CVE-2023-37450)](https://pwn.watch/i/apple-multiple-products-cve-2023-37450) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-37450.json)): high, closed, patched, started 2023-07-13, CVE-2023-37450
- [Apple Multiple Products: WebKit Type Confusion (CVE-2023-32439)](https://pwn.watch/i/apple-multiple-products-cve-2023-32439) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-32439.json)): high, closed, patched, started 2023-06-23, CVE-2023-32439
- [Operation Triangulation: zero-click iMessage spyware on Kaspersky's iPhones](https://pwn.watch/i/operation-triangulation-ios-zero-click-2023) ([json](https://pwn.watch/i/operation-triangulation-ios-zero-click-2023.json)): high, closed, patched, started 2023-06-01, CVE-2023-32434, CVE-2023-32435, CVE-2023-38606
- [Apple Multiple Products: 3 exploited vulnerabilities (CVE-2023-28204, CVE-2023-32373, CVE-2023-32409)](https://pwn.watch/i/apple-multiple-products-cve-2023-28204-32373-32409) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-28204-32373-32409.json)): high, closed, patched, started 2023-05-22, CVE-2023-28204, CVE-2023-32373, CVE-2023-32409
- [Apple iOS, iPadOS, and macOS: IOSurfaceAccelerator Out-of-Bounds Write (CVE-2023-28206)](https://pwn.watch/i/apple-ios-ipados-and-macos-cve-2023-28206) ([json](https://pwn.watch/i/apple-ios-ipados-and-macos-cve-2023-28206.json)): high, closed, patched, started 2023-04-10, CVE-2023-28206
- [Apple Multiple Products: WebKit Use-After-Free (CVE-2023-28205)](https://pwn.watch/i/apple-multiple-products-cve-2023-28205) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-28205.json)): high, closed, patched, started 2023-04-10, CVE-2023-28205
- [Apple Multiple Products: WebKit Type Confusion (CVE-2023-23529)](https://pwn.watch/i/apple-multiple-products-cve-2023-23529) ([json](https://pwn.watch/i/apple-multiple-products-cve-2023-23529.json)): high, closed, patched, started 2023-02-14, CVE-2023-23529