Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

31 records

Release: Apple macOS 26.1 Clear all filters
TI-2025-28134 CVE-2025-43430 · GHSA-hmxw-42mv-c458

Improper input validation in Apple Safari

Priority LOW 22

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01087 Published 2025-11-04 Partial fix · 26.1 CWE-20
TI-2025-28151 CVE-2025-43447 · GHSA-qj67-gr9c-3589

Memory corruption in Apple iOS and iPadOS

Priority LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00192 Published 2025-11-04 Fixed in 26.1 CWE-119
TI-2025-28203 CVE-2025-43502 · GHSA-4v2x-jqm6-7wqw

Improper access control in Apple Safari

Priority LOW 39

A privacy issue was addressed by removing sensitive data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00472 Published 2025-11-04 Fixed in 26.1 CWE-284
TI-2025-28091 CVE-2025-43386 · GHSA-366p-fxmq-8hhv

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 35

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00225 Published 2025-11-04 Fixed in 18.7.2, 26.1 CWE-125
TI-2025-28204 CVE-2025-43503 · GHSA-8v28-rgjq-f5h7

Authentication bypass by spoofing in Apple Safari

Priority LOW 20

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00417 Published 2025-11-04 Fixed in 26.1, 18.7.2 CWE-290
TI-2025-28131 CVE-2025-43427 · GHSA-vg6g-ppvj-7qh3

Improper input validation in Apple Safari

Priority LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0055 Published 2025-11-04 Partial fix · 26.1 CWE-20
TI-2025-28135 CVE-2025-43431 · GHSA-73f2-rmwh-r8w6

Memory corruption in Apple Safari

Priority MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00855 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-119
TI-2025-28159 CVE-2025-43457 · GHSA-9c63-94gf-85h2

Use after free in Apple Safari

Priority LOW 32

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00613 Published 2025-11-04 Partial fix · 26.1 CWE-416
TI-2025-28145 CVE-2025-43441 · GHSA-m3cw-288r-j9r9

Memory corruption in Apple Safari

Priority LOW 22

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0096 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-119
TI-2025-28140 CVE-2025-43436 · GHSA-3jx8-9w5m-fvm9

Authentication bypass in Apple iOS and iPadOS

Priority MEDIUM 40

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00581 Published 2025-11-04 Fixed in 26.1 CWE-288
TI-2025-28125 CVE-2025-43421 · GHSA-43xx-j7mw-696v

Out-of-bounds read in Apple Safari

Priority LOW 21

Multiple issues were addressed by disabling array allocation sinking.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00642 Published 2025-11-04 Partial fix · 26.1 CWE-125
TI-2025-28144 CVE-2025-43440 · GHSA-gh9m-4g47-fhpv

Cross-site scripting in Apple Safari

Priority LOW 29

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00507 Published 2025-11-04 Partial fix · 26.1 CWE-79
TI-2025-28142 CVE-2025-43438 · GHSA-h3q9-mrw5-m795

Use after free in Apple Safari

Priority LOW 24

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01112 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-416
TI-2025-28138 CVE-2025-43434 · GHSA-3x69-vfm2-92j8

Use after free in Apple Safari

Priority LOW 23

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01284 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-416
TI-2025-28160 CVE-2025-43458 · GHSA-x462-8pqp-gj6q

Improper input validation in Apple Safari

Priority LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00612 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-20
TI-2025-28139 CVE-2025-43435 · GHSA-gwp3-4wx7-jwwf

Memory corruption in Apple Safari

Priority LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00751 Published 2025-11-04 Fixed in 26.1, 18.7.2 CWE-119
TI-2025-28128 CVE-2025-43424 · GHSA-jp2w-2c9w-v4jw

Memory corruption in Apple iOS and iPadOS

Priority LOW 29

The issue was addressed with improved bounds checks.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00304 Published 2025-11-04 Fixed in 26.1 CWE-119
TI-2025-28136 CVE-2025-43432 · GHSA-g56v-hwx4-cxqq

Use after free in Apple Safari

Priority LOW 24

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00842 Published 2025-11-04 Partial fix · 26.1 CWE-416
Load more