Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

16 records

Release: Apple iOS and iPadOS 18.7.7, 26.4 Clear all filters
TI-2026-16743 CVE-2026-20687 · GHSA-c4px-j3mf-78gh

Use after free in Apple iOS and iPadOS

Priority LOW 31

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00348 Published 2026-03-25 Fixed in 18.7.7, 26.4 +1 CWE-416
TI-2026-16721 CVE-2026-20665 · GHSA-w9qh-3c3h-mc7x

Protection mechanism failure in Apple Safari

Priority LOW 36

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00634 Published 2026-03-25 Partial fix · 26.4, 18.7.7 CWE-693
TI-2026-23072 CVE-2026-28886 · GHSA-3gqw-qcrw-37vv

NULL pointer dereference in Apple iOS and iPadOS

Priority LOW 28

A null pointer dereference was addressed with improved input validation.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00665 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-476
TI-2026-16745 CVE-2026-20690 · GHSA-9q8x-28q7-g3j2

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 30

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00752 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-125
TI-2026-23054 CVE-2026-28865 · GHSA-g677-cg8f-8p94

Improper authorization in Apple iOS and iPadOS

Priority LOW 34

An authentication issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00794 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-285
TI-2026-23066 CVE-2026-28878 · GHSA-c5f2-qj7x-m7r9

Information disclosure in Apple iOS and iPadOS

Priority LOW 37

A privacy issue was addressed by removing sensitive data.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00898 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-200
TI-2026-23067 CVE-2026-28879 · GHSA-r6xf-37w8-p5j6

Use after free in Apple iOS and iPadOS

Priority LOW 29

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00458 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-416
TI-2026-23068 CVE-2026-28880 · GHSA-wh29-fhm6-hqrh

Improper access control in Apple iOS and iPadOS

Priority LOW 36

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00794 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-284
TI-2026-23064 CVE-2026-28876 · GHSA-xp9f-jj97-j8gx

Improper access control in Apple iOS and iPadOS

Priority LOW 33

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00487 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-284
TI-2026-23050 CVE-2026-28861 · GHSA-mf24-ggcw-q27g

Cross-site scripting in Apple Safari

Priority LOW 20

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00322 Published 2026-03-25 Fixed in 26.4, 18.7.7 CWE-79
TI-2026-16714 CVE-2026-20657 · GHSA-qm38-v5q7-v23r

Memory corruption in Apple iOS and iPadOS

Priority LOW 30

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00562 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-119
TI-2026-23055 CVE-2026-28866 · GHSA-8j28-3434-4q9h

Link following in Apple iOS and iPadOS

Priority LOW 27

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00241 Published 2026-03-25 Fixed in 18.7.7, 26.4 +2 CWE-59
TI-2026-23059 CVE-2026-28871 · GHSA-m46v-chmw-rw9m

Cross-site scripting in Apple Safari

Priority LOW 20

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00287 Published 2026-03-25 Partial fix · 26.4, 18.7.7 CWE-79