Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

24 records

Release: Apple iPadOS 17.7.7 Clear all filters
TI-2025-22459 CVE-2025-31220 · GHSA-7j7h-p7m5-p62q

Information disclosure in Apple iPadOS

Priority LOW 24

A privacy issue was addressed by removing sensitive data.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00223 Published 2025-05-12 Fixed in 17.7.7, 13.7.6 +2 CWE-200
TI-2025-22479 CVE-2025-31241 · GHSA-hhpv-c9vh-9v76

Double free in Apple iOS and iPadOS

Priority LOW 32

A double free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00875 Published 2025-05-12 Fixed in 18.5, 17.7.7 +5 CWE-415
TI-2025-17870 CVE-2025-24111 · GHSA-gc4x-2qcw-h9vv

Memory corruption in Apple iOS and iPadOS

Priority LOW 24

A memory corruption issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00245 Published 2025-05-12 Fixed in 18.3, 17.7.7 +5 CWE-119
TI-2025-22456 CVE-2025-31217 · GHSA-fp6q-7cxg-f24x

Improper input validation in Apple Safari

Priority LOW 30

The issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00679 Published 2025-05-12 Fixed in 18.5, 17.7.7 +3 CWE-20
TI-2025-22460 CVE-2025-31221 · GHSA-9v48-2prj-rqc9

Integer overflow in Apple iOS and iPadOS

Priority LOW 35

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0103 Published 2025-05-12 Fixed in 18.5, 17.7.7 +5 CWE-190
TI-2025-22446 CVE-2025-31206 · GHSA-wv7w-fgmw-6vg2

Type confusion in Apple Safari

Priority LOW 22

A type confusion issue was addressed with improved state handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01004 Published 2025-05-12 Partial fix · 18.5, 17.7.7 +3 CWE-843
TI-2025-17974 CVE-2025-24225 · GHSA-h347-278r-gx23

Cross-site scripting in Apple iOS and iPadOS

Priority LOW 29

An injection issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00523 Published 2025-05-12 Fixed in 18.5, 17.7.7 CWE-79
TI-2025-22436 CVE-2025-31196 · GHSA-c629-xm2q-h69v

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 24

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0025 Published 2025-05-12 Fixed in 18.4, 17.7.7 +5 CWE-125
TI-2025-22471 CVE-2025-31233 · GHSA-89f5-mmjh-cmgw

Improper input validation in Apple iOS and iPadOS

Priority LOW 31

The issue was addressed with improved input sanitization.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.01283 Published 2025-05-12 Fixed in 18.5, 17.7.7 +5 CWE-20
TI-2025-22449 CVE-2025-31209 · GHSA-fcrm-wvmg-6h7p

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 30

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00875 Published 2025-05-12 Fixed in 18.5, 17.7.7 +5 CWE-125
TI-2025-22452 CVE-2025-31213 · GHSA-hj49-gv4m-x7jm

Sensitive information in log files in Apple iPadOS

Priority LOW 34

A logging issue was addressed with improved data redaction.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00628 Published 2025-05-12 Fixed in 17.7.7, 13.7.6 +2 CWE-532
TI-2025-21748 CVE-2025-30448 · GHSA-422f-7vrg-37qx

Missing authorization in Apple iOS and iPadOS

Priority MEDIUM 47

This issue was addressed with additional entitlement checks.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01016 Published 2025-05-12 Fixed in 18.5, 17.7.7 +4 CWE-862
TI-2025-22477 CVE-2025-31239 · GHSA-qfr5-98gw-pmcj

Use after free in Apple iOS and iPadOS

Priority LOW 23

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00683 Published 2025-05-12 Fixed in 18.5, 17.7.7 +5 CWE-416
TI-2025-22480 CVE-2025-31242 · GHSA-xf4q-c7gc-gpgr

Information disclosure in Apple iOS and iPadOS

Priority LOW 24

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00229 Published 2025-05-12 Fixed in 18.5, 17.7.7 +7 CWE-200
TI-2025-22454 CVE-2025-31215 · GHSA-3jpv-h4fh-v8h9

Improper input validation in Apple Safari

Priority LOW 30

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00654 Published 2025-05-12 Partial fix · 18.5, 17.7.7 +3 CWE-20
TI-2025-17901 CVE-2025-24144 · GHSA-h8j4-8q54-qmm9

Information disclosure in Apple iOS and iPadOS

Priority LOW 24

An information disclosure issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00237 Published 2025-05-12 Fixed in 18.3, 17.7.7 +5 CWE-200
TI-2025-22473 CVE-2025-31235 · GHSA-xh5p-rm5r-7f82

Double free in Apple iPadOS

Priority LOW 28

A double free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00202 Published 2025-05-12 Fixed in 17.7.7, 13.7.6 +2 CWE-415
TI-2025-22458 CVE-2025-31219 · GHSA-59ch-hp3c-w6qw

Memory corruption in Apple iOS and iPadOS

Priority LOW 33

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.01111 Published 2025-05-12 Fixed in 18.5, 17.7.7 +5 CWE-119