Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

30 records

Release: Apple watchOS 26.1 Clear all filters
TI-2025-28134 CVE-2025-43430 · GHSA-hmxw-42mv-c458

Improper input validation in Apple Safari

Priority LOW 22

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01087 Published 2025-11-04 Partial fix · 26.1 CWE-20
TI-2025-28151 CVE-2025-43447 · GHSA-qj67-gr9c-3589

Memory corruption in Apple iOS and iPadOS

Priority LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00192 Published 2025-11-04 Fixed in 26.1 CWE-119
TI-2025-28204 CVE-2025-43503 · GHSA-8v28-rgjq-f5h7

Authentication bypass by spoofing in Apple Safari

Priority LOW 20

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00417 Published 2025-11-04 Fixed in 26.1, 18.7.2 CWE-290
TI-2025-28135 CVE-2025-43431 · GHSA-73f2-rmwh-r8w6

Memory corruption in Apple Safari

Priority MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00855 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-119
TI-2025-28084 CVE-2025-43379 · GHSA-8xgx-m7f9-xj3q

Link following in Apple iOS and iPadOS

Priority LOW 24

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00214 Published 2025-11-04 Fixed in 26.1, 14.8.2 +1 CWE-59
TI-2025-28159 CVE-2025-43457 · GHSA-9c63-94gf-85h2

Use after free in Apple Safari

Priority LOW 32

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00613 Published 2025-11-04 Partial fix · 26.1 CWE-416
TI-2025-28140 CVE-2025-43436 · GHSA-3jx8-9w5m-fvm9

Authentication bypass in Apple iOS and iPadOS

Priority MEDIUM 40

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00581 Published 2025-11-04 Fixed in 26.1 CWE-288
TI-2025-28144 CVE-2025-43440 · GHSA-gh9m-4g47-fhpv

Cross-site scripting in Apple Safari

Priority LOW 29

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00507 Published 2025-11-04 Partial fix · 26.1 CWE-79
TI-2025-28142 CVE-2025-43438 · GHSA-h3q9-mrw5-m795

Use after free in Apple Safari

Priority LOW 24

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01112 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-416
TI-2025-28138 CVE-2025-43434 · GHSA-3x69-vfm2-92j8

Use after free in Apple Safari

Priority LOW 23

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01284 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-416
TI-2025-28161 CVE-2025-43459 · GHSA-cvjw-3jg5-rvcq

Incorrect authorization in Apple watchOS

Priority LOW 21

An authentication issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00245 Published 2025-11-04 Fixed in 26.1 CWE-863
TI-2025-28103 CVE-2025-43398 · GHSA-47gw-6w5v-m496

Memory corruption in Apple iOS and iPadOS

Priority LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.002 Published 2025-11-04 Fixed in 18.7.2, 26.1 +2 CWE-119
TI-2025-28160 CVE-2025-43458 · GHSA-x462-8pqp-gj6q

Improper input validation in Apple Safari

Priority LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00612 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-20
TI-2025-28139 CVE-2025-43435 · GHSA-gwp3-4wx7-jwwf

Memory corruption in Apple Safari

Priority LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00751 Published 2025-11-04 Fixed in 26.1, 18.7.2 CWE-119
TI-2025-28136 CVE-2025-43432 · GHSA-g56v-hwx4-cxqq

Use after free in Apple Safari

Priority LOW 24

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00842 Published 2025-11-04 Partial fix · 26.1 CWE-416
TI-2025-28149 CVE-2025-43445 · GHSA-jrv3-f6mq-763r

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 22

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01116 Published 2025-11-04 Fixed in 18.7.2, 26.1 +2 CWE-125
Load more