Class familyApple · iOS and iPadOS
Apple iOS and macOS incorrect authorization flaws, 2023–2026
14 iOS and iPadOS CVEs with CWE-863 weaknesses, 26 Sep 2023 to 20 Oct 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2023’23
1 2024’24
6 2025’25
6 2026’26
In CISA KEVNot in KEV
20231 CVE
20241 CVE
20256 CVEs, 1 in KEV
20266 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2023-35990 | 26 Sep 2023 | The issue was addressed with improved checks | Grouped by weakness | 4.2 |
| CVE-2024-23262 | 8 Mar 2024 | This issue was addressed with additional entitlement checks | Grouped by weakness | 11.3 |
| CVE-2024-44136 | 15 Jan 2025 | This issue was addressed through improved state management | Grouped by weakness | 14.1 |
| CVE-2025-24141 | 27 Jan 2025 | An authentication issue was addressed with improved state management | Grouped by weakness | 4.6 |
| CVE-2025-24200KEV | 10 Feb 2025 | Apple iOS and iPadOS Incorrect Authorization Vulnerability | Grouped by weakness | 60.6 |
| CVE-2025-24221 | 31 Mar 2025 | This issue was addressed with improved data access restriction | Grouped by weakness | 17.0 |
| CVE-2025-30469 | 31 Mar 2025 | This issue was addressed through improved state management | Grouped by weakness | 5.5 |
| CVE-2025-31227 | 12 May 2025 | A logic issue was addressed with improved checks | Grouped by weakness | 7.2 |
| CVE-2026-28873 | 11 May 2026 | This issue was addressed with additional entitlement checks | Grouped by weakness | 10.0 |
| CVE-2026-28951 | 11 May 2026 | An authorization issue was addressed with improved state management | Grouped by weakness | 6.0 |
| CVE-2026-65404 | 14 Sep 2026 | An authorization issue was addressed with improved state management | Grouped by weakness | 4.6 |
| CVE-2026-84612 | 14 Sep 2026 | An authorization issue was addressed with improved access control | Grouped by weakness | 4.8 |
| CVE-2026-84617 | 14 Sep 2026 | An authorization issue was addressed with improved state management | Grouped by weakness | 4.5 |
| CVE-2026-86977 | 20 Oct 2026 | An authorization issue was addressed with improved network restrictions | Grouped by weakness | 8.7 |