Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

32 records

Release: Apple iOS and iPadOS 18.5 Clear all filters
TI-2025-17972 CVE-2025-24223 · GHSA-7mch-v7x5-pxc4

Cross-site request forgery in Apple Safari

Priority LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00329 Published 2025-05-12 Partial fix · 18.5, 15.5 +2 CWE-352
TI-2025-22479 CVE-2025-31241 · GHSA-hhpv-c9vh-9v76

Double free in Apple iOS and iPadOS

Priority LOW 32

A double free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00875 Published 2025-05-12 Fixed in 18.5, 17.7.7 +5 CWE-415
TI-2025-22494 CVE-2025-31257 · GHSA-289j-qjv7-62fr

Memory corruption in Apple Safari

Priority LOW 24

This issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.01099 Published 2025-05-12 Partial fix · 18.5, 15.5 +2 CWE-119
TI-2025-22456 CVE-2025-31217 · GHSA-fp6q-7cxg-f24x

Improper input validation in Apple Safari

Priority LOW 30

The issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00679 Published 2025-05-12 Fixed in 18.5, 17.7.7 +3 CWE-20
TI-2025-22460 CVE-2025-31221 · GHSA-9v48-2prj-rqc9

Integer overflow in Apple iOS and iPadOS

Priority LOW 35

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0103 Published 2025-05-12 Fixed in 18.5, 17.7.7 +5 CWE-190
TI-2025-22446 CVE-2025-31206 · GHSA-wv7w-fgmw-6vg2

Type confusion in Apple Safari

Priority LOW 22

A type confusion issue was addressed with improved state handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01004 Published 2025-05-12 Partial fix · 18.5, 17.7.7 +3 CWE-843
TI-2025-17974 CVE-2025-24225 · GHSA-h347-278r-gx23

Cross-site scripting in Apple iOS and iPadOS

Priority LOW 29

An injection issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00523 Published 2025-05-12 Fixed in 18.5, 17.7.7 CWE-79
TI-2025-22444 CVE-2025-31204 · GHSA-9wc3-7frf-f65v

Memory corruption in Apple Safari

Priority MEDIUM 41

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00678 Published 2025-05-12 Partial fix · 18.5, 15.5 +2 CWE-119
TI-2025-22451 CVE-2025-31212 · GHSA-gcw6-vg32-9cqw

Improper access control in Apple iOS and iPadOS

Priority LOW 24

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00209 Published 2025-05-12 Fixed in 18.5, 15.5 +2 CWE-284
TI-2025-22464 CVE-2025-31225 · GHSA-6mhh-cg8v-6pjf

Information disclosure in Apple iOS and iPadOS

Priority LOW 31

A privacy issue was addressed by removing sensitive data.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0041 Published 2025-05-12 Fixed in 18.5 CWE-200
TI-2025-22471 CVE-2025-31233 · GHSA-89f5-mmjh-cmgw

Improper input validation in Apple iOS and iPadOS

Priority LOW 31

The issue was addressed with improved input sanitization.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.01283 Published 2025-05-12 Fixed in 18.5, 17.7.7 +5 CWE-20
TI-2025-22449 CVE-2025-31209 · GHSA-fcrm-wvmg-6h7p

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 30

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00875 Published 2025-05-12 Fixed in 18.5, 17.7.7 +5 CWE-125
TI-2025-22445 CVE-2025-31205 · GHSA-jfxw-jpwh-7j8j

Cross-site request forgery in Apple Safari

Priority LOW 29

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00394 Published 2025-05-12 Partial fix · 18.5, 15.5 +2 CWE-352
TI-2025-21748 CVE-2025-30448 · GHSA-422f-7vrg-37qx

Missing authorization in Apple iOS and iPadOS

Priority MEDIUM 47

This issue was addressed with additional entitlement checks.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01016 Published 2025-05-12 Fixed in 18.5, 17.7.7 +4 CWE-862
TI-2025-22472 CVE-2025-31234 · GHSA-j6wh-9fq4-rcrh

Memory corruption in Apple iOS and iPadOS

Priority MEDIUM 42

The issue was addressed with improved input sanitization.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00588 Published 2025-05-12 Fixed in 18.5, 15.5 +1 CWE-119
Load more