Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

18 records

Release: Apple watchOS 26 Clear all filters
TI-2025-28056 CVE-2025-43349 · GHSA-fgjx-3vj9-xp25

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 17

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1LOW 2.8 Local Low privileges User interaction EPSS 0.00523 Published 2025-09-15 Fixed in 18.7, 26 +2 CWE-787
TI-2025-28051 CVE-2025-43344 · GHSA-xx4w-8h42-jm57

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 16

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00332 Published 2025-09-15 Fixed in 26 CWE-125
TI-2025-27902 CVE-2025-43190 · GHSA-xh68-c6f3-2hjc

Path traversal in Apple iOS and iPadOS

Priority LOW 24

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00269 Published 2025-09-15 Fixed in 26, 14.8 +1 CWE-22
TI-2025-28036 CVE-2025-43329 · GHSA-r859-36w5-m999

Missing authorization in Apple iOS and iPadOS

Priority MEDIUM 40

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00314 Published 2025-09-15 Fixed in 26 CWE-862
TI-2025-28050 CVE-2025-43343 · GHSA-r357-mp92-7297

Memory corruption in Apple Safari

Priority MEDIUM 50

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2025-09-15 Partial fix · 26 CWE-119
TI-2025-28061 CVE-2025-43355 · GHSA-hc69-9v7q-3fw3

Type confusion in Apple iOS and iPadOS

Priority LOW 24

A type confusion issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00235 Published 2025-09-15 Fixed in 18.7, 26 +2 CWE-843
TI-2025-28010 CVE-2025-43302 · GHSA-5ffp-qrx5-4jmj

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 24

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00264 Published 2025-09-15 Fixed in 18.7, 26 +2 CWE-787
TI-2025-28049 CVE-2025-43342 · GHSA-f8v5-f9hr-87fq

Improper input validation in Apple Safari

Priority MEDIUM 50

A correctness issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00774 Published 2025-09-15 Partial fix · 26, 18.7 CWE-20
TI-2025-27980 CVE-2025-43272 · GHSA-5jpr-fhxv-v82h

Memory corruption in Apple Safari

Priority LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01079 Published 2025-09-15 Partial fix · 26 CWE-119
TI-2025-28062 CVE-2025-43356 · GHSA-pq66-4888-3qq9

Information disclosure in Apple Safari

Priority LOW 30

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00671 Published 2025-09-15 Partial fix · 26, 18.7 CWE-200
TI-2025-22492 CVE-2025-31255 · GHSA-wvgw-7w26-q2wp

Improper authorization in Apple iOS and iPadOS

Priority MEDIUM 52

An authorization issue was addressed with improved state management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01627 Published 2025-09-15 Fixed in 26, 14.8 +1 CWE-285
TI-2025-28053 CVE-2025-43346 · GHSA-8v5v-v3qc-mqv8

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 26

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00238 Published 2025-09-15 Fixed in 18.7, 26 CWE-125