Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

25 records

Release: Apple macOS 14.8.4, 15.7.4, 26.3 Clear all filters
TI-2026-16662 CVE-2026-20605 · GHSA-8cmp-jqmx-pj7w

Memory corruption in Apple iOS and iPadOS

Priority LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00268 Published 2026-02-11 Fixed in 18.7.5, 14.8.4 +2 CWE-119
TI-2026-16682 CVE-2026-20625 · GHSA-qg96-wxg3-3x3h

Path traversal in Apple macOS

Priority LOW 24

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00233 Published 2026-02-11 Fixed in 14.8.4, 15.7.4 +1 CWE-22
TI-2026-16666 CVE-2026-20609 · GHSA-p47v-wp9g-8362

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 19

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00147 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-125
TI-2026-16681 CVE-2026-20624 · GHSA-cm39-88fp-pv6j

Incorrect authorization in Apple macOS

Priority LOW 24

An injection issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00203 Published 2026-02-11 Fixed in 14.8.4, 15.7.4 +1 CWE-863
TI-2026-16710 CVE-2026-20653 · GHSA-946c-234f-fccx

Path traversal in Apple iOS and iPadOS

Priority LOW 24

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00188 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-22
TI-2026-16669 CVE-2026-20612 · GHSA-25q2-mm9v-fcj8

Information disclosure in Apple macOS

Priority LOW 24

A privacy issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00163 Published 2026-02-11 Fixed in 14.8.4, 15.7.4 +1 CWE-200
TI-2026-16685 CVE-2026-20628 · GHSA-934f-cmh4-43m7

Improper access control in Apple iOS and iPadOS

Priority LOW 32

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00142 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-284
TI-2026-16672 CVE-2026-20615 · GHSA-82p2-ccrf-wxw5

Path traversal in Apple iOS and iPadOS

Priority LOW 35

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00188 Published 2026-02-11 Fixed in 26.3, 14.8.4 +1 CWE-22
TI-2026-16660 CVE-2026-20602 · GHSA-hxp3-qj63-m9j9

Uncontrolled resource consumption in Apple macOS

Priority LOW 24

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00164 Published 2026-02-11 Fixed in 14.8.4, 15.7.4 +1 CWE-400
TI-2026-16671 CVE-2026-20614 · GHSA-hx52-r225-3pxc

Path traversal in Apple macOS

Priority LOW 35

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00189 Published 2026-02-11 Fixed in 14.8.4, 15.7.4 +1 CWE-22
TI-2026-16736 CVE-2026-20680 · GHSA-xw8j-p597-rjrj

Information disclosure in Apple iOS and iPadOS

Priority LOW 28

The issue was addressed with additional restrictions on the observability of app states.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00146 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-200
TI-2026-16731 CVE-2026-20675 · GHSA-pmfg-h9xp-96jh

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 36

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00304 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-125
TI-2026-16678 CVE-2026-20621 · GHSA-q5q3-fgwr-rr9h

Memory corruption in Apple iOS and iPadOS

Priority LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00157 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-119
TI-2026-16674 CVE-2026-20617 · GHSA-4q59-wccf-6q9r

Race condition in Apple iOS and iPadOS

Priority LOW 32

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00119 Published 2026-02-11 Fixed in 26.3, 14.8.4 +1 CWE-362
TI-2026-16677 CVE-2026-20620 · GHSA-3jj8-9qpj-6989

Out-of-bounds read in Apple macOS

Priority LOW 33

An out-of-bounds read issue was addressed with improved input validation.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00216 Published 2026-02-11 Fixed in 14.8.4, 15.7.4 +1 CWE-125
TI-2026-16668 CVE-2026-20611 · GHSA-3frw-32pg-5m86

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 36

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00309 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-125
TI-2026-16727 CVE-2026-20671 · GHSA-3qr2-wf7p-c9f8

Command injection in Apple iOS and iPadOS

Priority LOW 15

A logic issue was addressed with improved checks.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00357 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-77
TI-2026-16663 CVE-2026-20606 · GHSA-frmq-2cmp-gh32

Information disclosure in Apple iOS and iPadOS

Priority LOW 32

This issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00166 Published 2026-02-11 Fixed in 18.7.5, 26.3 +2 CWE-200