Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

18 records

Release: Apple iOS and iPadOS 26.5 Clear all filters
TI-2026-23086 CVE-2026-28901 · GHSA-6cxc-cp8p-4h26

Memory corruption in Apple Safari

Priority LOW 20

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00389 Published 2026-05-11 Partial fix · 26.5 CWE-119
TI-2026-23135 CVE-2026-28956 · GHSA-f3j7-jqj9-3m57

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 29

A memory corruption issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00521 Published 2026-05-11 Fixed in 26.5, 14.8.7 +1 CWE-125
TI-2026-23161 CVE-2026-28985 · GHSA-w9f3-jqrp-mw9r

NULL pointer dereference in Apple iOS and iPadOS

Priority LOW 27

A null pointer dereference was addressed with improved input validation.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00159 Published 2026-05-11 Fixed in 26.5 CWE-476
TI-2026-31751 CVE-2026-43655 · GHSA-6wgp-q874-jmmx

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 32

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00365 Published 2026-05-11 Fixed in 26.5 CWE-125
TI-2026-23164 CVE-2026-28988 · GHSA-8pv7-gjvg-66w2

Improper access control in Apple iOS and iPadOS

Priority LOW 24

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00129 Published 2026-05-11 Fixed in 26.5 CWE-284
TI-2026-23149 CVE-2026-28971 · GHSA-rjgv-f67w-7wg6

Clickjacking in Apple Safari

Priority LOW 20

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00296 Published 2026-05-11 Fixed in 26.5 CWE-1021
TI-2026-23090 CVE-2026-28905 · GHSA-523x-p7vc-qqv3

Memory corruption in Apple Safari

Priority LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2026-05-11 Partial fix · 26.5 CWE-119
TI-2026-23098 CVE-2026-28913 · GHSA-7gg5-fpc5-p8qm

Memory corruption in Apple Safari

Priority LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00326 Published 2026-05-11 Fixed in 26.5 CWE-119
TI-2026-23125 CVE-2026-28944 · GHSA-jvf8-r5gx-vr8v

Memory corruption in Apple Safari

Priority LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00397 Published 2026-05-11 Fixed in 26.5 CWE-119
TI-2026-23166 CVE-2026-28991 · GHSA-778p-qw96-fmjp

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 34

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0056 Published 2026-05-11 Fixed in 26.5, 15.8.2 CWE-125
TI-2026-23071 CVE-2026-28883 · GHSA-hwcr-g58m-97q5

Use after free in Apple Safari

Priority LOW 39

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00399 Published 2026-05-11 Partial fix · 26.5 CWE-416
TI-2026-23152 CVE-2026-28974 · GHSA-xxh7-j8v2-g57f

Improper access control in Apple iOS and iPadOS

Priority LOW 39

This issue was addressed with improved checks to prevent unauthorized actions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00407 Published 2026-05-11 Fixed in 26.5, 15.7.7 CWE-284
TI-2026-23123 CVE-2026-28942 · GHSA-2m37-4h9f-8wcf

Use after free in Apple Safari

Priority LOW 30

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00609 Published 2026-05-11 Partial fix · 26.5 CWE-416
TI-2026-23087 CVE-2026-28902 · GHSA-9rrc-92m2-c228

Memory corruption in Apple Safari

Priority LOW 29

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00389 Published 2026-05-11 Partial fix · 26.5 CWE-119
TI-2026-23102 CVE-2026-28918 · GHSA-8pvj-crrw-v6jv

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 29

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00487 Published 2026-05-11 Fixed in 26.5 CWE-125