Advisories · Technology

Apple iOS and iPadOS.

Every CVE that names Apple iOS and iPadOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-31229 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- CWE-261
Not analysed yet 29 Jul 2025
CVE-2025-43213 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-31281 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-20
Not analysed yet 29 Jul 2025
CVE-2025-43223 CVE record

CVSS 7.5 High

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-20
Not analysed yet 29 Jul 2025
CVE-2025-43200 CVE record

CVSS 4.2 MediumCritical · KEVKEV

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 16 Jun 2025
CVE-2025-30466 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Origin validation error in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-346
Not analysed yet 29 May 2025
CVE-2025-31199 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 29 May 2025
CVE-2025-24184 CVE record

CVSS 5.5 Medium

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 19 May 2025
CVE-2025-24189 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 19 May 2025
CVE-2025-31185 CVE record

CVSS 3.3 Low

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
Not analysed yet 19 May 2025
CVE-2025-31262 CVE record

CVSS 5.5 Medium

Incorrect permission assignment in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 19 May 2025
CVE-2025-24223 CVE record

CVSS 8.0 High

Cross-site request forgery in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site request forgery (CSRF)
Not analysed yet 12 May 2025
CVE-2025-31241 CVE record

CVSS 5.3 Medium

Double free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31257 CVE record

CVSS 4.7 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-24111 CVE record

CVSS 5.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31217 CVE record

CVSS 6.5 Medium

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 12 May 2025
CVE-2025-31221 CVE record

CVSS 7.5 High

Integer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31210 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 12 May 2025
CVE-2025-31206 CVE record

CVSS 4.3 Medium

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31251 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 12 May 2025
CVE-2025-31226 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 12 May 2025
CVE-2025-24225 CVE record

CVSS 6.5 Medium

Cross-site scripting in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Cross-site scripting (XSS)
Not analysed yet 12 May 2025
CVE-2025-31227 CVE record

CVSS 4.6 Medium

Incorrect authorization in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 12 May 2025
CVE-2025-30436 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper access control in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 12 May 2025
CVE-2025-31196 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31207 CVE record

CVSS 7.7 High

Information disclosure in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 12 May 2025
CVE-2025-31253 CVE record

CVSS 7.1 High

This issue was addressed through improved state management.
- Apple iOS and iPadOS
- CWE-672
Not analysed yet 12 May 2025
CVE-2025-31204 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31212 CVE record

CVSS 5.5 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 12 May 2025
CVE-2025-31245 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 12 May 2025
CVE-2025-31228 CVE record

CVSS 6.8 Medium

Improper authentication in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Authentication bypass
Not analysed yet 12 May 2025
CVE-2025-31208 CVE record

CVSS 7.5 High

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-20
Not analysed yet 12 May 2025
CVE-2025-31225 CVE record

CVSS 7.1 High

Information disclosure in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 12 May 2025
CVE-2025-31233 CVE record

CVSS 6.3 Medium

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-20
Not analysed yet 12 May 2025
CVE-2025-31209 CVE record

CVSS 6.3 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31205 CVE record

CVSS 6.5 Medium

Cross-site request forgery in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site request forgery (CSRF)
Not analysed yet 12 May 2025
CVE-2025-30448 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 12 May 2025
CVE-2025-31234 CVE record

CVSS 8.2 High

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31222 CVE record

CVSS 7.8 High

Improper privilege management in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Privilege escalation
Not analysed yet 12 May 2025
CVE-2025-31214 CVE record

CVSS 8.1 High

This issue was addressed through improved state management.
- Apple iOS and iPadOS
- CWE-300
Not analysed yet 12 May 2025
CVE-2025-31238 CVE record

CVSS 7.3 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31239 CVE record

CVSS 4.3 Medium

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31242 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 12 May 2025
CVE-2025-31215 CVE record

CVSS 6.5 Medium

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 12 May 2025
CVE-2025-24144 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 12 May 2025
CVE-2025-31223 CVE record

CVSS 8.0 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-24220 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 12 May 2025
CVE-2025-31219 CVE record

CVSS 7.1 High

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-24091 CVE record

CVSS 5.5 Medium

Authentication bypass by spoofing in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Authentication bypass
Not analysed yet 30 Apr 2025
CVE-2025-24252 CVE record

CVSS 8.8 High

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-31197 CVE record

CVSS 5.7 Medium

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-24179 CVE record

CVSS 5.7 Medium

NULL pointer dereference in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-24270 CVE record

CVSS 5.7 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 29 Apr 2025
CVE-2025-24271 CVE record

CVSS 5.4 Medium

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Authentication bypass
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-24206 CVE record

CVSS 7.7 High

Authentication bypass in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Authentication bypass
Not analysed yet 29 Apr 2025
CVE-2025-24251 CVE record

CVSS 6.5 Medium

NULL pointer dereference in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-31202 CVE record

CVSS 5.5 Medium

NULL pointer dereference in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-31203 CVE record

CVSS 6.5 Medium

Integer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-30445 CVE record

CVSS 6.5 Medium

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Apr 2025
CVE-2025-31200 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 16 Apr 2025