Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

44 records

Release: Apple tvOS 26.5 Clear all filters
TI-2026-23159 CVE-2026-28983 · GHSA-36h7-c8f4-vc3p

Type confusion in Apple iOS and iPadOS

Priority MEDIUM 40

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00808 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-843
TI-2026-23121 CVE-2026-28940 · GHSA-757x-6rpx-jpwf

Memory corruption in Apple iOS and iPadOS

Priority MEDIUM 41

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00597 Published 2026-05-11 Fixed in 18.7.9, 26.5 +1 CWE-119
TI-2026-23101 CVE-2026-28917 · GHSA-88j2-27wc-pfg2

Improper input validation in Apple Safari

Priority LOW 20

The issue was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00296 Published 2026-05-11 Fixed in 26.5, 18.7.9 CWE-20
TI-2026-28749 CVE-2026-39869 · GHSA-qfc3-4682-w48w

Buffer overflow in Apple iOS and iPadOS

Priority LOW 20

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0028 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-120
TI-2026-23086 CVE-2026-28901 · GHSA-6cxc-cp8p-4h26

Memory corruption in Apple Safari

Priority LOW 20

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00389 Published 2026-05-11 Partial fix · 26.5 CWE-119
TI-2026-23135 CVE-2026-28956 · GHSA-f3j7-jqj9-3m57

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 29

A memory corruption issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00521 Published 2026-05-11 Fixed in 26.5, 14.8.7 +1 CWE-125
TI-2026-23169 CVE-2026-28994 · GHSA-w3jp-cxwr-6jwc

Use after free in Apple iOS and iPadOS

Priority LOW 24

A use after free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00242 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-416
TI-2026-31763 CVE-2026-43668 · GHSA-xfpc-cffv-p6m3

Use after free in Apple iOS and iPadOS

Priority LOW 35

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01115 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-416
TI-2026-23154 CVE-2026-28977 · GHSA-qmqx-qxq3-57q5

Memory corruption in Apple iOS and iPadOS

Priority LOW 27

The issue was addressed with improved bounds checks.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00157 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-119
TI-2026-23104 CVE-2026-28920 · GHSA-hcrq-r2rc-m54f

Information disclosure in Apple iOS and iPadOS

Priority LOW 29

An information leakage was addressed with additional validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00323 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-200
TI-2026-23161 CVE-2026-28985 · GHSA-w9f3-jqrp-mw9r

NULL pointer dereference in Apple iOS and iPadOS

Priority LOW 27

A null pointer dereference was addressed with improved input validation.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00159 Published 2026-05-11 Fixed in 26.5 CWE-476
TI-2026-23092 CVE-2026-28907 · GHSA-gcfw-ghg9-2x22

Improper output encoding in Apple Safari

Priority LOW 37

The issue was addressed with improved input validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00304 Published 2026-05-11 Partial fix · 26.5, 18.7.9 CWE-116
TI-2026-31751 CVE-2026-43655 · GHSA-6wgp-q874-jmmx

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 32

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00365 Published 2026-05-11 Fixed in 26.5 CWE-125
TI-2026-23128 CVE-2026-28947 · GHSA-52pv-8487-c6jp

Use after free in Apple Safari

Priority MEDIUM 40

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00378 Published 2026-05-11 Partial fix · 26.5, 18.7.10 CWE-416
TI-2026-31754 CVE-2026-43658 · GHSA-gc3p-ph3x-xqq6

Memory corruption in Apple Safari

Priority LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00318 Published 2026-05-11 Partial fix · 26.5, 18.7.10 CWE-119
TI-2026-23167 CVE-2026-28992 · GHSA-f933-7fg4-gxqr

Race condition in Apple iOS and iPadOS

Priority LOW 21

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00143 Published 2026-05-11 Fixed in 18.7.9, 26.5 +2 CWE-362
TI-2026-23090 CVE-2026-28905 · GHSA-523x-p7vc-qqv3

Memory corruption in Apple Safari

Priority LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2026-05-11 Partial fix · 26.5 CWE-119
TI-2026-23098 CVE-2026-28913 · GHSA-7gg5-fpc5-p8qm

Memory corruption in Apple Safari

Priority LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00326 Published 2026-05-11 Fixed in 26.5 CWE-119
TI-2026-23166 CVE-2026-28991 · GHSA-778p-qw96-fmjp

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 34

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0056 Published 2026-05-11 Fixed in 26.5, 15.8.2 CWE-125
Load more