Advisories · Technology

Apple iOS and iPadOS.

Every CVE that names Apple iOS and iPadOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-28858 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-28859 CVE record

CVSS 4.3 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-28875 CVE record

CVSS 7.5 High

Buffer overflow in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-28822 CVE record

CVSS 6.2 Medium

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-28863 CVE record

CVSS 6.5 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-28855 CVE record

CVSS 7.5 High

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-28879 CVE record

CVSS 6.5 Medium

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-28880 CVE record

CVSS 6.5 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-28856 CVE record

CVSS 4.6 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple visionOS
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-28895 CVE record

CVSS 4.6 Medium

Improper access control in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-20637 CVE record

CVSS 6.2 Medium

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-28876 CVE record

CVSS 7.5 High

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-28861 CVE record

CVSS 4.3 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
- CWE-346
Not analysed yet 25 Mar 2026
CVE-2026-20694 CVE record

CVSS 5.5 Medium

This issue was addressed with improved handling of symlinks.
- Apple iOS and iPadOS
- Apple macOS
- CWE-61
Not analysed yet 25 Mar 2026
CVE-2026-28877 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 25 Mar 2026
CVE-2026-20657 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-20698 CVE record

CVSS 5.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-28882 CVE record

CVSS 4.0 Medium

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 25 Mar 2026
CVE-2026-28894 CVE record

CVSS 7.5 High

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-20
Not analysed yet 25 Mar 2026
CVE-2026-28857 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-28870 CVE record

CVSS 5.5 Medium

An information leakage was addressed with additional validation.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 25 Mar 2026
CVE-2026-28866 CVE record

CVSS 6.2 Medium

Symlink following in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 25 Mar 2026
CVE-2026-20688 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 25 Mar 2026
CVE-2026-28867 CVE record

CVSS 6.2 Medium

This issue was addressed with improved authentication.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 25 Mar 2026
CVE-2026-20692 CVE record

CVSS 5.3 Medium

A privacy issue was addressed with improved handling of user preferences.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 25 Mar 2026
CVE-2026-28871 CVE record

CVSS 4.3 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 25 Mar 2026
CVE-2026-20643 CVE record

CVSS 5.4 Medium

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
- CWE-346
Not analysed yet 17 Mar 2026
CVE-2023-43010 CVE record

CVSS 8.8 High

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple Safari
- Memory corruption
Not analysed yet 12 Mar 2026
CVE-2026-20644 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2026-20652 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
- Denial of service
Not analysed yet 11 Feb 2026
CVE-2026-20605 CVE record

CVSS 4.6 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2026-20609 CVE record

CVSS 4.4 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2026-20608 CVE record

CVSS 5.5 Medium

Resource allocation without limits in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
- Denial of service
Not analysed yet 11 Feb 2026
CVE-2026-20649 CVE record

CVSS 5.5 Medium

Insecure temporary file in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-377
Not analysed yet 11 Feb 2026
CVE-2026-20673 CVE record

CVSS 5.3 Medium

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 11 Feb 2026
CVE-2026-20653 CVE record

CVSS 5.5 Medium

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 11 Feb 2026
CVE-2026-20700 CVE record

CVSS 7.8 HighCritical · KEVKEV

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2026-20645 CVE record

CVSS 4.6 Medium

Clickjacking in Apple iOS and iPadOS
- Apple iOS and iPadOS
- CWE-1021
Not analysed yet 11 Feb 2026
CVE-2026-20628 CVE record

CVSS 7.1 High

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 11 Feb 2026
CVE-2026-20674 CVE record

CVSS 4.6 Medium

Information disclosure in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 11 Feb 2026
CVE-2026-20635 CVE record

CVSS 4.3 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2025-46301 CVE record

CVSS 5.7 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2026-20678 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 11 Feb 2026
CVE-2026-20615 CVE record

CVSS 7.8 High

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 11 Feb 2026
CVE-2026-20642 CVE record

CVSS 2.4 Low

Improper access control in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 11 Feb 2026
CVE-2026-20654 CVE record

CVSS 5.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2026-20655 CVE record

CVSS 5.5 Medium

Improper authentication in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Authentication bypass
Not analysed yet 11 Feb 2026
CVE-2026-20680 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 11 Feb 2026
CVE-2026-20638 CVE record

CVSS 5.5 Medium

Improper access control in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 11 Feb 2026
CVE-2025-46290 CVE record

CVSS 7.5 High

Protection mechanism failure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-693
- CWE-703
Not analysed yet 11 Feb 2026
CVE-2026-20663 CVE record

CVSS 3.3 Low

Sensitive information in log files in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 11 Feb 2026
CVE-2025-46300 CVE record

CVSS 5.7 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2026-20634 CVE record

CVSS 5.5 Medium

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 11 Feb 2026
CVE-2026-20675 CVE record

CVSS 7.8 High

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2025-46303 CVE record

CVSS 5.7 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2026-20660 CVE record

CVSS 5.5 Medium

Path traversal in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Path traversal
Not analysed yet 11 Feb 2026
CVE-2026-20621 CVE record

CVSS 5.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2026-20676 CVE record

CVSS 4.3 Medium

Uncontrolled resource consumption in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 11 Feb 2026
CVE-2026-20656 CVE record

CVSS 3.3 Low

Improper authorization in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 11 Feb 2026
CVE-2026-20640 CVE record

CVSS 4.6 Medium

An inconsistent user interface issue was addressed with improved state management.
- Apple iOS and iPadOS
- CWE-703
Not analysed yet 11 Feb 2026