Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

43 records

Release: Apple visionOS 26.1 Clear all filters
TI-2025-28134 CVE-2025-43430 · GHSA-hmxw-42mv-c458

Improper input validation in Apple Safari

Priority LOW 22

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01087 Published 2025-11-04 Partial fix · 26.1 CWE-20
TI-2025-28151 CVE-2025-43447 · GHSA-qj67-gr9c-3589

Memory corruption in Apple iOS and iPadOS

Priority LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00192 Published 2025-11-04 Fixed in 26.1 CWE-119
TI-2025-28203 CVE-2025-43502 · GHSA-4v2x-jqm6-7wqw

Improper access control in Apple Safari

Priority LOW 39

A privacy issue was addressed by removing sensitive data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00472 Published 2025-11-04 Fixed in 26.1 CWE-284
TI-2025-28091 CVE-2025-43386 · GHSA-366p-fxmq-8hhv

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 35

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00225 Published 2025-11-04 Fixed in 18.7.2, 26.1 CWE-125
TI-2025-28204 CVE-2025-43503 · GHSA-8v28-rgjq-f5h7

Authentication bypass by spoofing in Apple Safari

Priority LOW 20

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00417 Published 2025-11-04 Fixed in 26.1, 18.7.2 CWE-290
TI-2025-28131 CVE-2025-43427 · GHSA-vg6g-ppvj-7qh3

Improper input validation in Apple Safari

Priority LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0055 Published 2025-11-04 Partial fix · 26.1 CWE-20
TI-2025-28135 CVE-2025-43431 · GHSA-73f2-rmwh-r8w6

Memory corruption in Apple Safari

Priority MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00855 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-119
TI-2025-28084 CVE-2025-43379 · GHSA-8xgx-m7f9-xj3q

Link following in Apple iOS and iPadOS

Priority LOW 24

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00214 Published 2025-11-04 Fixed in 26.1, 14.8.2 +1 CWE-59
TI-2025-28159 CVE-2025-43457 · GHSA-9c63-94gf-85h2

Use after free in Apple Safari

Priority LOW 32

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00613 Published 2025-11-04 Partial fix · 26.1 CWE-416
TI-2025-28145 CVE-2025-43441 · GHSA-m3cw-288r-j9r9

Memory corruption in Apple Safari

Priority LOW 22

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0096 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-119
TI-2025-28140 CVE-2025-43436 · GHSA-3jx8-9w5m-fvm9

Authentication bypass in Apple iOS and iPadOS

Priority MEDIUM 40

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00581 Published 2025-11-04 Fixed in 26.1 CWE-288
TI-2025-28199 CVE-2025-43498 · GHSA-pqwf-2452-r2f3

Improper access control in Apple iOS and iPadOS

Priority LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00196 Published 2025-11-04 Fixed in 26.1, 14.8.2 +1 CWE-284
TI-2025-28125 CVE-2025-43421 · GHSA-43xx-j7mw-696v

Out-of-bounds read in Apple Safari

Priority LOW 21

Multiple issues were addressed by disabling array allocation sinking.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00642 Published 2025-11-04 Partial fix · 26.1 CWE-125
TI-2025-28144 CVE-2025-43440 · GHSA-gh9m-4g47-fhpv

Cross-site scripting in Apple Safari

Priority LOW 29

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00507 Published 2025-11-04 Partial fix · 26.1 CWE-79
TI-2025-28142 CVE-2025-43438 · GHSA-h3q9-mrw5-m795

Use after free in Apple Safari

Priority LOW 24

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01112 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-416
TI-2025-28138 CVE-2025-43434 · GHSA-3x69-vfm2-92j8

Use after free in Apple Safari

Priority LOW 23

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01284 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-416
TI-2025-28103 CVE-2025-43398 · GHSA-47gw-6w5v-m496

Memory corruption in Apple iOS and iPadOS

Priority LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.002 Published 2025-11-04 Fixed in 18.7.2, 26.1 +2 CWE-119
TI-2025-28160 CVE-2025-43458 · GHSA-x462-8pqp-gj6q

Improper input validation in Apple Safari

Priority LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00612 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-20
Load more