Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

27 records

Release: Apple tvOS 26.1 Clear all filters
TI-2025-28134 CVE-2025-43430 · GHSA-hmxw-42mv-c458

Improper input validation in Apple Safari

Priority LOW 22

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01087 Published 2025-11-04 Partial fix · 26.1 CWE-20
TI-2025-28091 CVE-2025-43386 · GHSA-366p-fxmq-8hhv

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 35

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00225 Published 2025-11-04 Fixed in 18.7.2, 26.1 CWE-125
TI-2025-28131 CVE-2025-43427 · GHSA-vg6g-ppvj-7qh3

Improper input validation in Apple Safari

Priority LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0055 Published 2025-11-04 Partial fix · 26.1 CWE-20
TI-2025-28135 CVE-2025-43431 · GHSA-73f2-rmwh-r8w6

Memory corruption in Apple Safari

Priority MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00855 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-119
TI-2025-28084 CVE-2025-43379 · GHSA-8xgx-m7f9-xj3q

Link following in Apple iOS and iPadOS

Priority LOW 24

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00214 Published 2025-11-04 Fixed in 26.1, 14.8.2 +1 CWE-59
TI-2025-28145 CVE-2025-43441 · GHSA-m3cw-288r-j9r9

Memory corruption in Apple Safari

Priority LOW 22

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0096 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-119
TI-2025-28140 CVE-2025-43436 · GHSA-3jx8-9w5m-fvm9

Authentication bypass in Apple iOS and iPadOS

Priority MEDIUM 40

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00581 Published 2025-11-04 Fixed in 26.1 CWE-288
TI-2025-28144 CVE-2025-43440 · GHSA-gh9m-4g47-fhpv

Cross-site scripting in Apple Safari

Priority LOW 29

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00507 Published 2025-11-04 Partial fix · 26.1 CWE-79
TI-2025-28103 CVE-2025-43398 · GHSA-47gw-6w5v-m496

Memory corruption in Apple iOS and iPadOS

Priority LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.002 Published 2025-11-04 Fixed in 18.7.2, 26.1 +2 CWE-119
TI-2025-28160 CVE-2025-43458 · GHSA-x462-8pqp-gj6q

Improper input validation in Apple Safari

Priority LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00612 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-20
TI-2025-28139 CVE-2025-43435 · GHSA-gwp3-4wx7-jwwf

Memory corruption in Apple Safari

Priority LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00751 Published 2025-11-04 Fixed in 26.1, 18.7.2 CWE-119
TI-2025-28088 CVE-2025-43383 · GHSA-9268-m28f-jpc3

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 24

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01003 Published 2025-11-04 Fixed in 18.7.2, 26.1 +1 CWE-125
TI-2025-28136 CVE-2025-43432 · GHSA-g56v-hwx4-cxqq

Use after free in Apple Safari

Priority LOW 24

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00842 Published 2025-11-04 Partial fix · 26.1 CWE-416
TI-2025-28089 CVE-2025-43384 · GHSA-jgh6-6f9c-475v

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 24

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01003 Published 2025-11-04 Fixed in 18.7.2, 26.1 +1 CWE-125
TI-2025-28149 CVE-2025-43445 · GHSA-jrv3-f6mq-763r

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 22

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01116 Published 2025-11-04 Fixed in 18.7.2, 26.1 +2 CWE-125
TI-2025-28118 CVE-2025-43413 · GHSA-g2mg-7ch7-9vr3

Improper access control in Apple iOS and iPadOS

Priority MEDIUM 40

An access issue was addressed with additional sandbox restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00627 Published 2025-11-04 Fixed in 26.1, 14.8.2 +1 CWE-284
TI-2025-28090 CVE-2025-43385 · GHSA-2hxv-mq53-vg5m

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 24

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01003 Published 2025-11-04 Fixed in 18.7.2, 26.1 +1 CWE-125
TI-2025-28133 CVE-2025-43429 · GHSA-p2fp-xccv-vf5p

Memory corruption in Apple Safari

Priority LOW 23

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0145 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-119
TI-2025-28152 CVE-2025-43448 · GHSA-pwvc-4r36-xf4c

Link following in Apple iOS and iPadOS

Priority LOW 28

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00315 Published 2025-11-04 Fixed in 18.7.2, 26.1 +2 CWE-59
Load more