Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

46 records

Release: Apple visionOS 26.5 Clear all filters
TI-2026-23159 CVE-2026-28983 · GHSA-36h7-c8f4-vc3p

Type confusion in Apple iOS and iPadOS

Priority MEDIUM 40

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00808 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-843
TI-2026-23121 CVE-2026-28940 · GHSA-757x-6rpx-jpwf

Memory corruption in Apple iOS and iPadOS

Priority MEDIUM 41

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00597 Published 2026-05-11 Fixed in 18.7.9, 26.5 +1 CWE-119
TI-2026-23101 CVE-2026-28917 · GHSA-88j2-27wc-pfg2

Improper input validation in Apple Safari

Priority LOW 20

The issue was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00296 Published 2026-05-11 Fixed in 26.5, 18.7.9 CWE-20
TI-2026-28749 CVE-2026-39869 · GHSA-qfc3-4682-w48w

Buffer overflow in Apple iOS and iPadOS

Priority LOW 20

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0028 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-120
TI-2026-23086 CVE-2026-28901 · GHSA-6cxc-cp8p-4h26

Memory corruption in Apple Safari

Priority LOW 20

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00389 Published 2026-05-11 Partial fix · 26.5 CWE-119
TI-2026-23135 CVE-2026-28956 · GHSA-f3j7-jqj9-3m57

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 29

A memory corruption issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00521 Published 2026-05-11 Fixed in 26.5, 14.8.7 +1 CWE-125
TI-2026-23136 CVE-2026-28957 · GHSA-c6gp-37qq-7f67

Improper access control in Apple iOS and iPadOS

Priority LOW 15

An issue with app access to camera metadata was addressed with improved logic.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00123 Published 2026-05-11 Fixed in 18.7.9, 26.5 CWE-284
TI-2026-31763 CVE-2026-43668 · GHSA-xfpc-cffv-p6m3

Use after free in Apple iOS and iPadOS

Priority LOW 35

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01115 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-416
TI-2026-23154 CVE-2026-28977 · GHSA-qmqx-qxq3-57q5

Memory corruption in Apple iOS and iPadOS

Priority LOW 27

The issue was addressed with improved bounds checks.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00157 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-119
TI-2026-23104 CVE-2026-28920 · GHSA-hcrq-r2rc-m54f

Information disclosure in Apple iOS and iPadOS

Priority LOW 29

An information leakage was addressed with additional validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00323 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-200
TI-2026-23168 CVE-2026-28993 · GHSA-vx52-282h-fq3g

Improper access control in Apple iOS and iPadOS

Priority LOW 24

This issue was addressed by adding an additional prompt for user consent.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00121 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-284
TI-2026-31755 CVE-2026-43659 · GHSA-5c55-3jwg-4fc5

Race condition in Apple iOS and iPadOS

Priority LOW 20

A race condition was addressed with additional validation.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00099 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-362
TI-2026-23092 CVE-2026-28907 · GHSA-gcfw-ghg9-2x22

Improper output encoding in Apple Safari

Priority LOW 37

The issue was addressed with improved input validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00304 Published 2026-05-11 Partial fix · 26.5, 18.7.9 CWE-116
TI-2026-23164 CVE-2026-28988 · GHSA-8pv7-gjvg-66w2

Improper access control in Apple iOS and iPadOS

Priority LOW 24

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00129 Published 2026-05-11 Fixed in 26.5 CWE-284
TI-2026-23149 CVE-2026-28971 · GHSA-rjgv-f67w-7wg6

Clickjacking in Apple Safari

Priority LOW 20

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00296 Published 2026-05-11 Fixed in 26.5 CWE-1021
TI-2026-23128 CVE-2026-28947 · GHSA-52pv-8487-c6jp

Use after free in Apple Safari

Priority MEDIUM 40

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00378 Published 2026-05-11 Partial fix · 26.5, 18.7.10 CWE-416
TI-2026-31754 CVE-2026-43658 · GHSA-gc3p-ph3x-xqq6

Memory corruption in Apple Safari

Priority LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00318 Published 2026-05-11 Partial fix · 26.5, 18.7.10 CWE-119
TI-2026-23167 CVE-2026-28992 · GHSA-f933-7fg4-gxqr

Race condition in Apple iOS and iPadOS

Priority LOW 21

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00143 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-362
TI-2026-23090 CVE-2026-28905 · GHSA-523x-p7vc-qqv3

Memory corruption in Apple Safari

Priority LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2026-05-11 Partial fix · 26.5 CWE-119
TI-2026-23125 CVE-2026-28944 · GHSA-jvf8-r5gx-vr8v

Memory corruption in Apple Safari

Priority LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00397 Published 2026-05-11 Fixed in 26.5 CWE-119
Load more