Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

16 records

Release: Apple iOS and iPadOS 26.4 Clear all filters
TI-2026-16720 CVE-2026-20664 · GHSA-v2g6-mw74-wfj3

Out-of-bounds write in Apple Safari

Priority LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00748 Published 2026-03-25 Partial fix · 26.4 CWE-787
TI-2026-23047 CVE-2026-28858 · GHSA-g835-6c4r-v6rm

Buffer overflow in Apple iOS and iPadOS

Priority MEDIUM 50

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00555 Published 2026-03-25 Fixed in 26.4 CWE-120
TI-2026-23048 CVE-2026-28859 · GHSA-q74v-rxg6-m2w6

Out-of-bounds read in Apple Safari

Priority LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00661 Published 2026-03-25 Partial fix · 26.4 CWE-125
TI-2026-23063 CVE-2026-28875 · GHSA-9hp7-89x8-v65v

Buffer overflow in Apple iOS and iPadOS

Priority LOW 39

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00493 Published 2026-03-25 Fixed in 26.4 CWE-120
TI-2026-23016 CVE-2026-28822 · GHSA-v459-vpgq-97pg

Type confusion in Apple iOS and iPadOS

Priority LOW 27

A type confusion issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0021 Published 2026-03-25 Fixed in 26.4, 14.8.5 +1 CWE-843
TI-2026-23052 CVE-2026-28863 · GHSA-9q9v-gcpr-jqgv

Improper access control in Apple iOS and iPadOS

Priority LOW 29

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00523 Published 2026-03-25 Fixed in 26.4 CWE-284
TI-2026-16753 CVE-2026-20698 · GHSA-fc7w-w2c7-j46c

Memory corruption in Apple iOS and iPadOS

Priority LOW 34

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00339 Published 2026-03-25 Fixed in 26.4 CWE-119
TI-2026-23079 CVE-2026-28894 · GHSA-55pg-vx6v-2jfh

Improper input validation in Apple iOS and iPadOS

Priority MEDIUM 40

A denial-of-service issue was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00691 Published 2026-03-25 Fixed in 26.4, 14.8.5 +1 CWE-20
TI-2026-23046 CVE-2026-28857 · GHSA-xc63-96v5-38fr

Out-of-bounds read in Apple Safari

Priority LOW 30

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00671 Published 2026-03-25 Partial fix · 26.4 CWE-125
TI-2026-16744 CVE-2026-20688 · GHSA-8x27-8fvr-pw94

Path traversal in Apple iOS and iPadOS

Priority MEDIUM 42

A path handling issue was addressed with improved validation.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00285 Published 2026-03-25 Fixed in 26.4, 14.8.5 +1 CWE-22