Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

23 records

Release: Apple iOS and iPadOS 18.7.5, 26.3 Clear all filters
TI-2026-16701 CVE-2026-20644 · GHSA-pxhf-qg7h-8x8m

Memory corruption in Apple Safari

Priority LOW 29

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00362 Published 2026-02-11 Partial fix · 26.3, 18.7.5 CWE-119
TI-2026-16666 CVE-2026-20609 · GHSA-p47v-wp9g-8362

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 19

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00147 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-125
TI-2026-16710 CVE-2026-20653 · GHSA-946c-234f-fccx

Path traversal in Apple iOS and iPadOS

Priority LOW 24

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00188 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-22
TI-2026-16702 CVE-2026-20645 · GHSA-3993-26cm-wfhm

Clickjacking in Apple iOS and iPadOS

Priority LOW 20

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00181 Published 2026-02-11 Fixed in 18.7.5, 26.3 CWE-1021
TI-2026-16685 CVE-2026-20628 · GHSA-934f-cmh4-43m7

Improper access control in Apple iOS and iPadOS

Priority LOW 32

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00142 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-284
TI-2026-16692 CVE-2026-20635 · GHSA-hjj6-wmh2-qhwj

Memory corruption in Apple Safari

Priority LOW 20

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00362 Published 2026-02-11 Partial fix · 26.3, 18.7.5 CWE-119
TI-2026-16734 CVE-2026-20678 · GHSA-w82w-6f63-rvgf

Information disclosure in Apple iOS and iPadOS

Priority LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00147 Published 2026-02-11 Fixed in 18.7.5, 26.3 CWE-200
TI-2026-16712 CVE-2026-20655 · GHSA-wp4v-6rrv-wqv9

Improper authentication in Apple iOS and iPadOS

Priority LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00135 Published 2026-02-11 Fixed in 18.7.5, 26.3 CWE-287
TI-2026-16736 CVE-2026-20680 · GHSA-xw8j-p597-rjrj

Information disclosure in Apple iOS and iPadOS

Priority LOW 28

The issue was addressed with additional restrictions on the observability of app states.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00146 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-200
TI-2026-16731 CVE-2026-20675 · GHSA-pmfg-h9xp-96jh

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 36

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00304 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-125
TI-2026-16716 CVE-2026-20660 · GHSA-c5gm-v7v7-vjx9

Path traversal in Apple Safari

Priority LOW 34

A path handling issue was addressed with improved logic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00761 Published 2026-02-11 Fixed in 26.3, 18.7.5 +2 CWE-22
TI-2026-16678 CVE-2026-20621 · GHSA-q5q3-fgwr-rr9h

Memory corruption in Apple iOS and iPadOS

Priority LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00157 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-119
TI-2026-16738 CVE-2026-20682 · GHSA-3p5c-6wpr-gh3w

Information disclosure in Apple iOS and iPadOS

Priority LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2026-02-11 Fixed in 18.7.5, 26.3 CWE-200
TI-2026-16717 CVE-2026-20661 · GHSA-v9g2-54rr-mxmg

Improper authorization in Apple iOS and iPadOS

Priority LOW 20

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00181 Published 2026-02-11 Fixed in 18.7.5, 26.3 CWE-285
TI-2026-16668 CVE-2026-20611 · GHSA-3frw-32pg-5m86

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 36

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00309 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-125
TI-2026-16727 CVE-2026-20671 · GHSA-3qr2-wf7p-c9f8

Command injection in Apple iOS and iPadOS

Priority LOW 15

A logic issue was addressed with improved checks.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00357 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-77
TI-2026-16663 CVE-2026-20606 · GHSA-frmq-2cmp-gh32

Information disclosure in Apple iOS and iPadOS

Priority LOW 32

This issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00166 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-200