Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

35 records

Release: Apple iOS and iPadOS 18.7.9, 26.5 Clear all filters
TI-2026-23159 CVE-2026-28983 · GHSA-36h7-c8f4-vc3p

Type confusion in Apple iOS and iPadOS

Priority MEDIUM 40

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00808 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-843
TI-2026-23121 CVE-2026-28940 · GHSA-757x-6rpx-jpwf

Memory corruption in Apple iOS and iPadOS

Priority MEDIUM 41

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00597 Published 2026-05-11 Fixed in 18.7.9, 26.5 +1 CWE-119
TI-2026-23101 CVE-2026-28917 · GHSA-88j2-27wc-pfg2

Improper input validation in Apple Safari

Priority LOW 20

The issue was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00296 Published 2026-05-11 Fixed in 26.5, 18.7.9 CWE-20
TI-2026-28749 CVE-2026-39869 · GHSA-qfc3-4682-w48w

Buffer overflow in Apple iOS and iPadOS

Priority LOW 20

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0028 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-120
TI-2026-23136 CVE-2026-28957 · GHSA-c6gp-37qq-7f67

Improper access control in Apple iOS and iPadOS

Priority LOW 15

An issue with app access to camera metadata was addressed with improved logic.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00123 Published 2026-05-11 Fixed in 18.7.9, 26.5 CWE-284
TI-2026-23169 CVE-2026-28994 · GHSA-w3jp-cxwr-6jwc

Use after free in Apple iOS and iPadOS

Priority LOW 24

A use after free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00242 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-416
TI-2026-31763 CVE-2026-43668 · GHSA-xfpc-cffv-p6m3

Use after free in Apple iOS and iPadOS

Priority LOW 35

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01115 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-416
TI-2026-23154 CVE-2026-28977 · GHSA-qmqx-qxq3-57q5

Memory corruption in Apple iOS and iPadOS

Priority LOW 27

The issue was addressed with improved bounds checks.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00157 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-119
TI-2026-23104 CVE-2026-28920 · GHSA-hcrq-r2rc-m54f

Information disclosure in Apple iOS and iPadOS

Priority LOW 29

An information leakage was addressed with additional validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00323 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-200
TI-2026-23168 CVE-2026-28993 · GHSA-vx52-282h-fq3g

Improper access control in Apple iOS and iPadOS

Priority LOW 24

This issue was addressed by adding an additional prompt for user consent.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00121 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-284
TI-2026-31755 CVE-2026-43659 · GHSA-5c55-3jwg-4fc5

Race condition in Apple iOS and iPadOS

Priority LOW 20

A race condition was addressed with additional validation.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00099 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-362
TI-2026-23092 CVE-2026-28907 · GHSA-gcfw-ghg9-2x22

Improper output encoding in Apple Safari

Priority LOW 37

The issue was addressed with improved input validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00304 Published 2026-05-11 Partial fix · 26.5, 18.7.9 CWE-116
TI-2026-23130 CVE-2026-28951 · GHSA-798q-fw67-pc42

Incorrect authorization in Apple iOS and iPadOS

Priority LOW 35

An authorization issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00132 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-863
TI-2026-23167 CVE-2026-28992 · GHSA-f933-7fg4-gxqr

Race condition in Apple iOS and iPadOS

Priority LOW 21

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00143 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-362
TI-2026-23150 CVE-2026-28972 · GHSA-5wpw-5qmq-59j8

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 32

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01385 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-787
TI-2026-31752 CVE-2026-43656 · GHSA-xfh5-8vfh-9mjc

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 32

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00265 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-787
TI-2026-23162 CVE-2026-28986 · GHSA-jp3g-c936-q6p5

Race condition in Apple iOS and iPadOS

Priority LOW 39

A race condition was addressed with additional validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-362
TI-2026-31756 CVE-2026-43660 · GHSA-xcxj-2mhj-x95h

Protection mechanism failure in Apple Safari

Priority LOW 38

A validation issue was addressed with improved logic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0027 Published 2026-05-11 Partial fix · 26.5, 18.7.9 CWE-693
Load more