Advisories · Technology

Apple iOS and iPadOS.

Every CVE that names Apple iOS and iPadOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-43385 CVE record

CVSS 4.3 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43429 CVE record

CVSS 4.3 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43350 CVE record

CVSS 2.4 Low

Incorrect default permissions in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 4 Nov 2025
CVE-2025-43448 CVE record

CVSS 6.3 Medium

Symlink following in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 4 Nov 2025
CVE-2025-43389 CVE record

CVSS 5.5 Medium

Exposure of personal information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 4 Nov 2025
CVE-2025-43433 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43425 CVE record

CVSS 4.3 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43282 CVE record

CVSS 5.5 Medium

Double free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 15 Oct 2025
CVE-2025-43280 CVE record

CVSS 4.7 Medium

The issue was resolved by not loading remote images.
- Apple iOS and iPadOS
- CWE-940
Not analysed yet 15 Oct 2025
CVE-2025-43400 CVE record

CVSS 6.3 Medium

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Sept 2025
CVE-2025-43349 CVE record

CVSS 2.8 Low

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 15 Sept 2025
CVE-2025-43294 CVE record

CVSS 3.3 Low

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 15 Sept 2025
CVE-2025-43344 CVE record

CVSS 3.3 Low

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 15 Sept 2025
CVE-2025-43190 CVE record

CVSS 5.5 Medium

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 15 Sept 2025
CVE-2025-43368 CVE record

CVSS 4.3 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 15 Sept 2025
CVE-2025-43295 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 15 Sept 2025
CVE-2025-43329 CVE record

CVSS 8.8 High

Missing authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 15 Sept 2025
CVE-2025-43299 CVE record

CVSS 5.5 Medium

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-20
Not analysed yet 15 Sept 2025
CVE-2025-43372 CVE record

CVSS 6.5 Medium

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-20
Not analysed yet 15 Sept 2025
CVE-2025-43343 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 15 Sept 2025
CVE-2025-43355 CVE record

CVSS 5.5 Medium

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 15 Sept 2025
CVE-2025-43302 CVE record

CVSS 5.5 Medium

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 15 Sept 2025
CVE-2025-43359 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

A logic issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple macOS
- CWE-670
Not analysed yet 15 Sept 2025
CVE-2025-43358 CVE record

CVSS 8.8 High

Missing authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 15 Sept 2025
CVE-2025-43362 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Information disclosure in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 15 Sept 2025
CVE-2025-43303 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 15 Sept 2025
CVE-2025-43354 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 15 Sept 2025
CVE-2025-43342 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 15 Sept 2025
CVE-2025-43357 CVE record

CVSS 5.5 Medium

Exposure of personal information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 15 Sept 2025
CVE-2025-43272 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 15 Sept 2025
CVE-2025-43317 CVE record

CVSS 5.5 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 15 Sept 2025
CVE-2025-43356 CVE record

CVSS 6.5 Medium

Information disclosure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 15 Sept 2025
CVE-2025-31255 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 15 Sept 2025
CVE-2025-43347 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-20
Not analysed yet 15 Sept 2025
CVE-2025-30468 CVE record

CVSS 6.5 Medium

Weak authentication in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Authentication bypass
Not analysed yet 15 Sept 2025
CVE-2025-43203 CVE record

CVSS 4.0 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 15 Sept 2025
CVE-2025-43346 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 15 Sept 2025
CVE-2025-31254 CVE record

CVSS 5.4 Medium

Incorrect authorization in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 15 Sept 2025
CVE-2025-43300 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 21 Aug 2025
CVE-2025-43265 CVE record

CVSS 4.0 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-43216 CVE record

CVSS 6.5 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-43186 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-43217 CVE record

CVSS 4.0 Medium

Exposure of personal information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 29 Jul 2025
CVE-2025-31276 CVE record

CVSS 5.3 Medium

Exposure of personal information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 29 Jul 2025
CVE-2025-43230 CVE record

CVSS 4.0 Medium

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 29 Jul 2025
CVE-2025-43226 CVE record

CVSS 4.0 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-24224 CVE record

CVSS 7.5 High

Improper check for unusual conditions in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-754
Not analysed yet 29 Jul 2025
CVE-2025-43227 CVE record

CVSS 7.5 High

Exposure of personal information in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 29 Jul 2025
CVE-2025-43211 CVE record

CVSS 6.2 Medium

Resource allocation without limits in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 29 Jul 2025
CVE-2025-43212 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-43228 CVE record

CVSS 4.3 Medium

The issue was addressed with improved UI.
- Apple Safari
- Apple iOS and iPadOS
- CWE-451
Not analysed yet 29 Jul 2025
CVE-2025-43224 CVE record

CVSS 7.1 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-43209 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-43234 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-20
Not analysed yet 29 Jul 2025
CVE-2025-43214 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-31278 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-31277 CVE record

CVSS 8.8 HighCritical · KEVKEV

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-43277 CVE record

CVSS 7.8 High

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-43221 CVE record

CVSS 7.1 High

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-31273 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025