Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

25 records

Release: Apple iOS and iPadOS 26.1 Clear all filters
TI-2025-28134 CVE-2025-43430 · GHSA-hmxw-42mv-c458

Improper input validation in Apple Safari

Priority LOW 22

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01087 Published 2025-11-04 Partial fix · 26.1 CWE-20
TI-2025-28151 CVE-2025-43447 · GHSA-qj67-gr9c-3589

Memory corruption in Apple iOS and iPadOS

Priority LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00192 Published 2025-11-04 Fixed in 26.1 CWE-119
TI-2025-28203 CVE-2025-43502 · GHSA-4v2x-jqm6-7wqw

Improper access control in Apple Safari

Priority LOW 39

A privacy issue was addressed by removing sensitive data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00472 Published 2025-11-04 Fixed in 26.1 CWE-284
TI-2025-28096 CVE-2025-43391 · GHSA-g279-fcr7-4vrp

Information disclosure in Apple iOS and iPadOS

Priority LOW 24

A privacy issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00207 Published 2025-11-04 Fixed in 26.1, 14.8.2 +1 CWE-200
TI-2025-28131 CVE-2025-43427 · GHSA-vg6g-ppvj-7qh3

Improper input validation in Apple Safari

Priority LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0055 Published 2025-11-04 Partial fix · 26.1 CWE-20
TI-2025-28084 CVE-2025-43379 · GHSA-8xgx-m7f9-xj3q

Link following in Apple iOS and iPadOS

Priority LOW 24

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00214 Published 2025-11-04 Fixed in 26.1, 14.8.2 +1 CWE-59
TI-2025-28159 CVE-2025-43457 · GHSA-9c63-94gf-85h2

Use after free in Apple Safari

Priority LOW 32

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00613 Published 2025-11-04 Partial fix · 26.1 CWE-416
TI-2025-28140 CVE-2025-43436 · GHSA-3jx8-9w5m-fvm9

Authentication bypass in Apple iOS and iPadOS

Priority MEDIUM 40

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00581 Published 2025-11-04 Fixed in 26.1 CWE-288
TI-2025-28199 CVE-2025-43498 · GHSA-pqwf-2452-r2f3

Improper access control in Apple iOS and iPadOS

Priority LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00196 Published 2025-11-04 Fixed in 26.1, 14.8.2 +1 CWE-284
TI-2025-28125 CVE-2025-43421 · GHSA-43xx-j7mw-696v

Out-of-bounds read in Apple Safari

Priority LOW 21

Multiple issues were addressed by disabling array allocation sinking.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00642 Published 2025-11-04 Partial fix · 26.1 CWE-125
TI-2025-28144 CVE-2025-43440 · GHSA-gh9m-4g47-fhpv

Cross-site scripting in Apple Safari

Priority LOW 29

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00507 Published 2025-11-04 Partial fix · 26.1 CWE-79
TI-2025-28128 CVE-2025-43424 · GHSA-jp2w-2c9w-v4jw

Memory corruption in Apple iOS and iPadOS

Priority LOW 29

The issue was addressed with improved bounds checks.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00304 Published 2025-11-04 Fixed in 26.1 CWE-119
TI-2025-28136 CVE-2025-43432 · GHSA-g56v-hwx4-cxqq

Use after free in Apple Safari

Priority LOW 24

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00842 Published 2025-11-04 Partial fix · 26.1 CWE-416
TI-2025-28118 CVE-2025-43413 · GHSA-g2mg-7ch7-9vr3

Improper access control in Apple iOS and iPadOS

Priority MEDIUM 40

An access issue was addressed with additional sandbox restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00627 Published 2025-11-04 Fixed in 26.1, 14.8.2 +1 CWE-284
TI-2025-28129 CVE-2025-43425 · GHSA-pq76-cc8r-h3cm

Memory corruption in Apple Safari

Priority LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00706 Published 2025-11-04 Partial fix · 26.1 CWE-119