Iphone

Vendor:

First CVE: Aug 3, 2007 · Active for 18 years

23

Total CVEs

More Total CVEs than 95% of tracked products

4.6

Avg CVEs / Year

Higher CVE frequency than 87% of tracked products

5.6

Avg CVSS

Higher Avg CVSS than 16% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Iphone over time

Volume of CVEsAvg CVSS Base Score

First CVE

Aug 3, 2007

18 years ago

Most Recent CVE

Mar 18, 2022

1,589 days ago

CVE Severity & Scoring

Iphone23 CVEs

9%

70%

22%

All CVEs352,231 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local0 (0.0%)

Network1 (4.3%)

Unknown22 (95.7%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low1 (4.3%)

High0 (0.0%)

Unknown22 (95.7%)

User Interaction

None0 (0.0%)

Unknown22 (95.7%)

Required1 (4.3%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None1 (4.3%)

Unknown22 (95.7%)

Top CVEs

Signals from CVEs in this product scope (23 CVEs).

23 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2008-2303HIGH Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application	Jul 14, 2008	10.0	41	NO	YES
CVE-2008-0729HIGH Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion and device crash) via certain JavaScript code that constructs	Feb 12, 2008	7.1	34	NO	YES
CVE-2008-3632HIGH Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of s	Sep 11, 2008	9.3	27	NO	NO
CVE-2008-2317HIGH WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remote attackers to execute arbitrary code or cause a denial of s	Jul 14, 2008	9.3	26	NO	NO
CVE-2010-1226MEDIUM The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service (Safari, Mail, or Springboard	Apr 1, 2010	5.0	25	NO	YES
CVE-2008-3950MEDIUM Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remot	Sep 16, 2008	5.0	25	NO	YES
CVE-2011-1344MEDIUM Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other	Mar 10, 2011	6.8	24	NO	NO
CVE-2022-22592MEDIUM A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing ma	Mar 18, 2022	6.5	23	NO	NO
CVE-2008-0035MEDIUM Unspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1.1 through 1.1.2, and Mac OS X 10.5 through 10.5.1, allows remote attackers to cause	Jan 16, 2008	6.8	21	NO	NO
CVE-2007-3753HIGH Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service (application termination) and execute arbitrary code via crafted Serv	Sep 27, 2007	7.5	20	NO	NO

View all 23 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (23 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

4 CVEs

17.4% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (23 CVEs).

Media Mentions

Signals from CVEs in this product scope (23 CVEs).

Top CNAs Publishing CVEs For Iphone

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
2.1	1	1.2	0.3%	0
2.0.2	2	5.6	3.2%	0
2.0.1	1	9.3	5.9%	0
2.0	2	7.2	6.5%	1
1.1.4	2	7.2	6.5%	1
1.1.3	1	9.3	5.9%	0
1.1	1	9.3	5.9%	0
1.02	1	4.6	0.4%	0
1.0	4	5.2	1.8%	0