Advisories · Technology

Apple iOS and iPadOS.

Every CVE that names Apple iOS and iPadOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-28951 CVE record

CVSS 7.8 High

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 11 May 2026
CVE-2026-28906 CVE record

CVSS 7.5 High

Exposure of personal information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 11 May 2026
CVE-2026-28947 CVE record

CVSS 8.8 High

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-43658 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28992 CVE record

CVSS 4.7 Medium

Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Race condition
Not analysed yet 11 May 2026
CVE-2026-28952 CVE record

CVSS 7.5 High

Integer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28905 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-43661 CVE record

CVSS 7.5 High

Stack-based buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28913 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28944 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28987 CVE record

CVSS 7.5 High

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 11 May 2026
CVE-2026-28991 CVE record

CVSS 7.5 High

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28929 CVE record

CVSS 7.5 High

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
- CWE-1254
Not analysed yet 11 May 2026
CVE-2026-28883 CVE record

CVSS 7.5 High

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28964 CVE record

CVSS 7.5 High

An inconsistent user interface issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple visionOS
- CWE-451
Not analysed yet 11 May 2026
CVE-2026-28972 CVE record

CVSS 6.5 Medium

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28860 CVE record

CVSS 7.5 High

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-20
Not analysed yet 11 May 2026
CVE-2026-28965 CVE record

CVSS 7.5 High

Improper access control in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 11 May 2026
CVE-2026-43656 CVE record

CVSS 7.3 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28990 CVE record

CVSS 7.5 High

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28986 CVE record

CVSS 7.5 High

Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Race condition
Not analysed yet 11 May 2026
CVE-2026-28969 CVE record

CVSS 7.5 High

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-43660 CVE record

CVSS 7.5 High

Protection mechanism failure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-693
Not analysed yet 11 May 2026
CVE-2026-28904 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28953 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28958 CVE record

CVSS 5.5 Medium

Information disclosure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 11 May 2026
CVE-2026-28962 CVE record

CVSS 7.5 High

Information disclosure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 11 May 2026
CVE-2026-28974 CVE record

CVSS 7.5 High

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 11 May 2026
CVE-2026-28954 CVE record

CVSS 7.5 High

Authentication bypass by spoofing in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Authentication bypass
Not analysed yet 11 May 2026
CVE-2026-28903 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28846 CVE record

CVSS 7.5 High

Stack-based buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28942 CVE record

CVSS 6.5 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28996 CVE record

CVSS 5.5 Medium

Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Race condition
Not analysed yet 11 May 2026
CVE-2026-28943 CVE record

CVSS 7.5 High

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 11 May 2026
CVE-2026-43666 CVE record

CVSS 6.2 Medium

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28902 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28847 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28955 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28963 CVE record

CVSS 4.6 Medium

Exposure of personal information in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 11 May 2026
CVE-2026-28918 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28959 CVE record

CVSS 7.5 High

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28950 CVE record

CVSS 6.2 Medium

Exposure of personal information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 22 Apr 2026
CVE-2025-43210 CVE record

CVSS 6.3 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 2 Apr 2026
CVE-2025-43202 CVE record

CVSS 8.8 High

This issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2026
CVE-2026-28864 CVE record

CVSS 3.3 Low

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-20691 CVE record

CVSS 4.3 Medium

An authorization issue was addressed with improved state management.
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 25 Mar 2026
CVE-2026-28833 CVE record

CVSS 6.2 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-20668 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 25 Mar 2026
CVE-2026-20687 CVE record

CVSS 7.1 High

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2025-43534 CVE record

CVSS 6.8 Medium

Improper access control in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-28868 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 25 Mar 2026
CVE-2026-20664 CVE record

CVSS 4.3 Medium

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-28852 CVE record

CVSS 5.5 Medium

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-20
Not analysed yet 25 Mar 2026
CVE-2026-20665 CVE record

CVSS 6.5 Medium

Protection mechanism failure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-693
Not analysed yet 25 Mar 2026
CVE-2026-28886 CVE record

CVSS 5.9 Medium

NULL pointer dereference in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-20686 CVE record

CVSS 5.3 Medium

Improper input validation in Apple iOS and iPadOS
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 25 Mar 2026
CVE-2026-20690 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-28865 CVE record

CVSS 7.5 High

Improper authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-28878 CVE record

CVSS 6.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 25 Mar 2026
CVE-2026-28874 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 25 Mar 2026