Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

27 records

Release: Apple visionOS 26.4 Clear all filters
TI-2026-23053 CVE-2026-28864 · GHSA-68wg-8f6g-2g2q

Incorrect authorization in Apple iOS and iPadOS

Priority LOW 15

This issue was addressed with improved permissions checking.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00183 Published 2026-03-25 Fixed in 18.7.7, 26.4 +4 CWE-863
TI-2026-16720 CVE-2026-20664 · GHSA-v2g6-mw74-wfj3

Out-of-bounds write in Apple Safari

Priority LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00748 Published 2026-03-25 Partial fix · 26.4 CWE-787
TI-2026-16721 CVE-2026-20665 · GHSA-w9qh-3c3h-mc7x

Protection mechanism failure in Apple Safari

Priority LOW 36

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00634 Published 2026-03-25 Partial fix · 26.4, 18.7.7 CWE-693
TI-2026-23072 CVE-2026-28886 · GHSA-3gqw-qcrw-37vv

NULL pointer dereference in Apple iOS and iPadOS

Priority LOW 28

A null pointer dereference was addressed with improved input validation.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00665 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-476
TI-2026-16745 CVE-2026-20690 · GHSA-9q8x-28q7-g3j2

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 30

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00752 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-125
TI-2026-23054 CVE-2026-28865 · GHSA-g677-cg8f-8p94

Improper authorization in Apple iOS and iPadOS

Priority LOW 34

An authentication issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00794 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-285
TI-2026-23066 CVE-2026-28878 · GHSA-c5f2-qj7x-m7r9

Information disclosure in Apple iOS and iPadOS

Priority LOW 37

A privacy issue was addressed by removing sensitive data.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00898 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-200
TI-2026-23048 CVE-2026-28859 · GHSA-q74v-rxg6-m2w6

Out-of-bounds read in Apple Safari

Priority LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00661 Published 2026-03-25 Partial fix · 26.4 CWE-125
TI-2026-23016 CVE-2026-28822 · GHSA-v459-vpgq-97pg

Type confusion in Apple iOS and iPadOS

Priority LOW 27

A type confusion issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0021 Published 2026-03-25 Fixed in 26.4, 14.8.5 +1 CWE-843
TI-2026-23052 CVE-2026-28863 · GHSA-9q9v-gcpr-jqgv

Improper access control in Apple iOS and iPadOS

Priority LOW 29

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00523 Published 2026-03-25 Fixed in 26.4 CWE-284
TI-2026-23067 CVE-2026-28879 · GHSA-r6xf-37w8-p5j6

Use after free in Apple iOS and iPadOS

Priority LOW 29

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00458 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-416
TI-2026-23068 CVE-2026-28880 · GHSA-wh29-fhm6-hqrh

Improper access control in Apple iOS and iPadOS

Priority LOW 36

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00794 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-284
TI-2026-23064 CVE-2026-28876 · GHSA-xp9f-jj97-j8gx

Improper access control in Apple iOS and iPadOS

Priority LOW 33

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00487 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-284
TI-2026-23050 CVE-2026-28861 · GHSA-mf24-ggcw-q27g

Cross-site scripting in Apple Safari

Priority LOW 20

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00322 Published 2026-03-25 Fixed in 26.4, 18.7.7 CWE-79
TI-2026-23065 CVE-2026-28877 · GHSA-gm8w-g7pf-24x5

Information disclosure in Apple iOS and iPadOS

Priority LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00173 Published 2026-03-25 Fixed in 18.7.9, 26.4 +2 CWE-200
TI-2026-16714 CVE-2026-20657 · GHSA-qm38-v5q7-v23r

Memory corruption in Apple iOS and iPadOS

Priority LOW 30

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00562 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-119
TI-2026-16753 CVE-2026-20698 · GHSA-fc7w-w2c7-j46c

Memory corruption in Apple iOS and iPadOS

Priority LOW 34

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00339 Published 2026-03-25 Fixed in 26.4 CWE-119
TI-2026-23046 CVE-2026-28857 · GHSA-xc63-96v5-38fr

Out-of-bounds read in Apple Safari

Priority LOW 30

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00671 Published 2026-03-25 Partial fix · 26.4 CWE-125
Load more