Advisories · Technology

Apple iPadOS.

Every CVE that names Apple iPadOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-24203 CVE record

CVSS 5.0 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 31 Mar 2025
CVE-2025-30447 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-24097 CVE record

CVSS 5.0 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24243 CVE record

CVSS 7.8 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Code injection
Not analysed yet 31 Mar 2025
CVE-2025-30426 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-24259 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper access control in Apple iPadOS and others
- Apple iPadOS
- Apple macOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-30471 CVE record

CVSS 7.5 High

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-20
Not analysed yet 31 Mar 2025
CVE-2025-24244 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 31 Mar 2025
CVE-2025-24213 CVE record

CVSS 7.8 High

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24205 CVE record

CVSS 5.5 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-24209 CVE record

CVSS 7.0 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24198 CVE record

CVSS 6.6 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-24264 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Uncontrolled resource consumption in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 31 Mar 2025
CVE-2025-24212 CVE record

CVSS 6.3 Medium

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 31 Mar 2025
CVE-2025-24211 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 31 Mar 2025
CVE-2025-24230 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24210 CVE record

CVSS 5.5 Medium

A logic error was addressed with improved error handling.
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-783
Not analysed yet 31 Mar 2025
CVE-2025-24178 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

This issue was addressed through improved state management.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 31 Mar 2025
CVE-2025-24237 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24221 CVE record

CVSS 7.5 High

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-30425 CVE record

CVSS 4.3 Medium

Improper access control in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-24173 CVE record

CVSS 7.8 High

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-30433 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-24190 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 31 Mar 2025
CVE-2025-30429 CVE record

CVSS 6.3 Medium

A path handling issue was addressed with improved validation.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 31 Mar 2025
CVE-2025-24216 CVE record

CVSS 4.3 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
- CWE-508
Not analysed yet 31 Mar 2025
CVE-2025-30428 CVE record

CVSS 5.4 Medium

This issue was addressed through improved state management.
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-305
Not analysed yet 31 Mar 2025
CVE-2025-30432 CVE record

CVSS 6.4 Medium

Improper authentication in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Authentication bypass
Not analysed yet 31 Mar 2025
CVE-2025-30465 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Incorrect default permissions in Apple iPadOS and others
- Apple iPadOS
- Apple macOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-24201 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+KEV

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24200 CVE record

CVSS 6.1 MediumCritical · KEVKEV

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 10 Feb 2025
CVE-2024-54543 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2024-54488 CVE record

CVSS 5.3 Medium

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2025-24127 CVE record

CVSS 5.5 Medium

Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 27 Jan 2025
CVE-2025-24131 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24086 CVE record

CVSS 5.5 Medium

Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 27 Jan 2025
CVE-2025-24161 CVE record

CVSS 5.5 Medium

Improper check for unusual conditions in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-754
Not analysed yet 27 Jan 2025
CVE-2025-24177 CVE record

CVSS 7.5 High

NULL pointer dereference in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24137 CVE record

CVSS 8.0 High

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24160 CVE record

CVSS 4.3 Medium

Improper resource shutdown in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 27 Jan 2025
CVE-2025-24117 CVE record

CVSS 5.5 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 27 Jan 2025
CVE-2024-54497 CVE record

CVSS 6.5 Medium

Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 27 Jan 2025
CVE-2024-54478 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24102 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Information disclosure in Apple iPadOS and others
- Apple iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 27 Jan 2025
CVE-2025-24118 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Out-of-bounds write in Apple iPadOS and others
- Apple iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24159 CVE record

CVSS 7.8 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Code injection
Not analysed yet 27 Jan 2025
CVE-2025-24163 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 27 Jan 2025
CVE-2025-24123 CVE record

CVSS 6.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 27 Jan 2025
CVE-2025-24085 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24149 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24124 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 27 Jan 2025
CVE-2024-54468 CVE record

CVSS 8.2 High

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 27 Jan 2025
CVE-2025-24104 CVE record

CVSS 5.5 Medium

Symlink following in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Path traversal
Not analysed yet 27 Jan 2025
CVE-2025-24113 CVE record

CVSS 4.3 Medium

The issue was addressed with improved UI.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 27 Jan 2025
CVE-2024-44201 CVE record

CVSS 5.5 Medium

Improper resource shutdown in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 11 Dec 2024
CVE-2024-54485 CVE record

CVSS 5.5 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 11 Dec 2024
CVE-2024-54492 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

This issue was addressed by using HTTPS when sending information over the network.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 11 Dec 2024
CVE-2024-54502 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54534 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54505 CVE record

CVSS 8.8 High

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024