Vulnerabilities

TI-2025-28051 CVE-2025-43344 · GHSA-xx4w-8h42-jm57

Out-of-bounds read in Apple iOS and iPadOS

LOW 16

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00332 Published 2025-09-15 Fixed in 26 CWE-125

TI-2025-27902 CVE-2025-43190 · GHSA-xh68-c6f3-2hjc

Path traversal in Apple iOS and iPadOS

LOW 24

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00269 Published 2025-09-15 Fixed in 26, 14.8 +1 CWE-22

TI-2025-28073 CVE-2025-43368 · GHSA-3cm9-h59j-r72g

Use after free in Apple Safari

LOW 22

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00806 Published 2025-09-15 Partial fix · 26 CWE-416

TI-2025-28036 CVE-2025-43329 · GHSA-r859-36w5-m999

Missing authorization in Apple iOS and iPadOS

MEDIUM 40

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00314 Published 2025-09-15 Fixed in 26 CWE-862

TI-2025-28077 CVE-2025-43372 · GHSA-f2ww-fv77-5mcx

Improper input validation in Apple iOS and iPadOS

LOW 35

The issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00515 Published 2025-09-15 Fixed in 26, 14.8.2 CWE-20

TI-2025-28050 CVE-2025-43343 · GHSA-r357-mp92-7297

Memory corruption in Apple Safari

MEDIUM 50

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2025-09-15 Partial fix · 26 CWE-119

TI-2025-28011 CVE-2025-43303 · GHSA-vv5c-28gh-c3h3

Sensitive information in log files in Apple iOS and iPadOS

LOW 24

A logging issue was addressed with improved data redaction.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00225 Published 2025-09-15 Fixed in 26 CWE-532

TI-2025-28060 CVE-2025-43354 · GHSA-g2jj-8rh3-43rg

Sensitive information in log files in Apple iOS and iPadOS

LOW 24

A logging issue was addressed with improved data redaction.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00227 Published 2025-09-15 Fixed in 26 CWE-532

TI-2025-27980 CVE-2025-43272 · GHSA-5jpr-fhxv-v82h

Memory corruption in Apple Safari

LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01079 Published 2025-09-15 Partial fix · 26 CWE-119

TI-2025-28025 CVE-2025-43317 · GHSA-ph5r-gx4p-5jcw

Improper access control in Apple iOS and iPadOS

LOW 24

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00223 Published 2025-09-15 Fixed in 26 CWE-284

TI-2025-22492 CVE-2025-31255 · GHSA-wvgw-7w26-q2wp

Improper authorization in Apple iOS and iPadOS

MEDIUM 52

An authorization issue was addressed with improved state management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01627 Published 2025-09-15 Fixed in 26, 14.8 +1 CWE-285

TI-2025-28054 CVE-2025-43347 · GHSA-7v6j-x95q-x36h

Improper input validation in Apple iOS and iPadOS

MEDIUM 51

This issue was addressed by removing the vulnerable code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00924 Published 2025-09-15 Fixed in 26 CWE-20

TI-2025-21768 CVE-2025-30468 · GHSA-pxqc-mxcr-vh66

Weak authentication in Apple iOS and iPadOS

LOW 35

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00371 Published 2025-09-15 Fixed in 26 CWE-1390

TI-2025-22491 CVE-2025-31254 · GHSA-gmw7-26j8-4983

Incorrect authorization in Apple Safari

LOW 25

This issue was addressed with improved URL validation.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00557 Published 2025-09-15 Fixed in 26 CWE-863

Vulnerabilities

Filters