Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

17 records

Release: Apple visionOS 26 Clear all filters
TI-2025-28056 CVE-2025-43349 · GHSA-fgjx-3vj9-xp25

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 17

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1LOW 2.8 Local Low privileges User interaction EPSS 0.00523 Published 2025-09-15 Fixed in 18.7, 26 +2 CWE-787
TI-2025-28051 CVE-2025-43344 · GHSA-xx4w-8h42-jm57

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 16

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00332 Published 2025-09-15 Fixed in 26 CWE-125
TI-2025-27902 CVE-2025-43190 · GHSA-xh68-c6f3-2hjc

Path traversal in Apple iOS and iPadOS

Priority LOW 24

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00269 Published 2025-09-15 Fixed in 26, 14.8 +1 CWE-22
TI-2025-28050 CVE-2025-43343 · GHSA-r357-mp92-7297

Memory corruption in Apple Safari

Priority MEDIUM 50

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2025-09-15 Partial fix · 26 CWE-119
TI-2025-28061 CVE-2025-43355 · GHSA-hc69-9v7q-3fw3

Type confusion in Apple iOS and iPadOS

Priority LOW 24

A type confusion issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00235 Published 2025-09-15 Fixed in 18.7, 26 +2 CWE-843
TI-2025-28010 CVE-2025-43302 · GHSA-5ffp-qrx5-4jmj

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 24

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00264 Published 2025-09-15 Fixed in 18.7, 26 +2 CWE-787
TI-2025-28049 CVE-2025-43342 · GHSA-f8v5-f9hr-87fq

Improper input validation in Apple Safari

Priority MEDIUM 50

A correctness issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00774 Published 2025-09-15 Partial fix · 26, 18.7 CWE-20
TI-2025-28024 CVE-2025-43316 · GHSA-jr92-g569-92j2

Missing authorization in Apple macOS

Priority LOW 36

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00323 Published 2025-09-15 Fixed in 26 CWE-862
TI-2025-27980 CVE-2025-43272 · GHSA-5jpr-fhxv-v82h

Memory corruption in Apple Safari

Priority LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01079 Published 2025-09-15 Partial fix · 26 CWE-119
TI-2025-28062 CVE-2025-43356 · GHSA-pq66-4888-3qq9

Information disclosure in Apple Safari

Priority LOW 30

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00671 Published 2025-09-15 Partial fix · 26, 18.7 CWE-200
TI-2025-28053 CVE-2025-43346 · GHSA-8v5v-v3qc-mqv8

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 26

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00238 Published 2025-09-15 Fixed in 18.7, 26 CWE-125