CVE Daily – Apple tvOS https://cvedaily.com/pages/tags/tvos.html CVE Daily – Apple tvOS en Wed, 03 Jun 2026 21:26:49 +0000 [High] CVE-2026-43668 – A use after free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-43668 https://nvd.nist.gov/vuln/detail/CVE-2026-43668 Mon, 11 May 2026 21:19:02 +0000 High CVE-2026-43668

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [Medium] CVE-2026-43666 – An out-of-bounds write issue was addressed with improved bounds checking. This i... https://nvd.nist.gov/vuln/detail/CVE-2026-43666 https://nvd.nist.gov/vuln/detail/CVE-2026-43666 Mon, 11 May 2026 21:19:01 +0000 Medium CVE-2026-43666

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An attacker on the local network may be able to cause a denial-of-service.

CVSS: 6.2 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-43661 – A buffer overflow issue was addressed with improved memory handling. This issue ... https://nvd.nist.gov/vuln/detail/CVE-2026-43661 https://nvd.nist.gov/vuln/detail/CVE-2026-43661 Mon, 11 May 2026 21:19:01 +0000 High CVE-2026-43661

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.

CVSS: 7.5 · CWE: CWE-121

View on NVD

]]> [High] CVE-2026-43660 – A validation issue was addressed with improved logic. This issue is fixed in Saf... https://nvd.nist.gov/vuln/detail/CVE-2026-43660 https://nvd.nist.gov/vuln/detail/CVE-2026-43660 Mon, 11 May 2026 21:19:01 +0000 High CVE-2026-43660

A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

CVSS: 7.5 · CWE: CWE-693

View on NVD

]]> [High] CVE-2026-43658 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-43658 https://nvd.nist.gov/vuln/detail/CVE-2026-43658 Mon, 11 May 2026 21:19:01 +0000 High CVE-2026-43658

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-43655 – An out-of-bounds read was addressed with improved bounds checking. This issue is... https://nvd.nist.gov/vuln/detail/CVE-2026-43655 https://nvd.nist.gov/vuln/detail/CVE-2026-43655 Mon, 11 May 2026 21:19:01 +0000 High CVE-2026-43655

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination or read kernel memory.

CVSS: 7.3 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-43654 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2026-43654 https://nvd.nist.gov/vuln/detail/CVE-2026-43654 Mon, 11 May 2026 21:19:01 +0000 High CVE-2026-43654

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to disclose kernel memory.

CVSS: 7.5 · CWE: CWE-497

View on NVD

]]> [Medium] CVE-2026-43653 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2026-43653 https://nvd.nist.gov/vuln/detail/CVE-2026-43653 Mon, 11 May 2026 21:19:01 +0000 Medium CVE-2026-43653

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5. An attacker on the local network may be able to cause a denial-of-service.

CVSS: 6.2 · CWE: CWE-400

View on NVD

]]> [Medium] CVE-2026-39869 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2026-39869 https://nvd.nist.gov/vuln/detail/CVE-2026-39869 Mon, 11 May 2026 21:18:59 +0000 Medium CVE-2026-39869

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing an audio stream in a maliciously crafted media file may terminate the process.

CVSS: 4.3 · CWE: CWE-120

View on NVD

]]> [Medium] CVE-2026-28996 – A race condition was addressed with additional validation. This issue is fixed i... https://nvd.nist.gov/vuln/detail/CVE-2026-28996 https://nvd.nist.gov/vuln/detail/CVE-2026-28996 Mon, 11 May 2026 21:18:59 +0000 Medium CVE-2026-28996

A race condition was addressed with additional validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to access sensitive user data.

CVSS: 5.5 · CWE: CWE-362

View on NVD

]]> [High] CVE-2026-28995 – A logic issue was addressed with improved restrictions. This issue is fixed in i... https://nvd.nist.gov/vuln/detail/CVE-2026-28995 https://nvd.nist.gov/vuln/detail/CVE-2026-28995 Mon, 11 May 2026 21:18:59 +0000 High CVE-2026-28995

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A malicious app may be able to break out of its sandbox.

CVSS: 8.8 · CWE: CWE-269

View on NVD

]]> [Medium] CVE-2026-28994 – A use after free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-28994 https://nvd.nist.gov/vuln/detail/CVE-2026-28994 Mon, 11 May 2026 21:18:59 +0000 Medium CVE-2026-28994

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Wi-Fi packets.

CVSS: 5.3 · CWE: CWE-416

View on NVD

]]> [Medium] CVE-2026-28992 – A memory corruption vulnerability was addressed with improved locking. This issu... https://nvd.nist.gov/vuln/detail/CVE-2026-28992 https://nvd.nist.gov/vuln/detail/CVE-2026-28992 Mon, 11 May 2026 21:18:59 +0000 Medium CVE-2026-28992

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An attacker may be able to cause unexpected app termination.

CVSS: 4.7 · CWE: CWE-362

View on NVD

]]> [High] CVE-2026-28991 – An out-of-bounds read was addressed with improved bounds checking. This issue is... https://nvd.nist.gov/vuln/detail/CVE-2026-28991 https://nvd.nist.gov/vuln/detail/CVE-2026-28991 Mon, 11 May 2026 21:18:59 +0000 High CVE-2026-28991

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause a denial-of-service.

CVSS: 7.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-28990 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2026-28990 https://nvd.nist.gov/vuln/detail/CVE-2026-28990 Mon, 11 May 2026 21:18:58 +0000 High CVE-2026-28990

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-28987 – A logging issue was addressed with improved data redaction. This issue is fixed ... https://nvd.nist.gov/vuln/detail/CVE-2026-28987 https://nvd.nist.gov/vuln/detail/CVE-2026-28987 Mon, 11 May 2026 21:18:58 +0000 High CVE-2026-28987

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to leak sensitive kernel state.

CVSS: 7.5 · CWE: CWE-532

View on NVD

]]> [High] CVE-2026-28986 – A race condition was addressed with additional validation. This issue is fixed i... https://nvd.nist.gov/vuln/detail/CVE-2026-28986 https://nvd.nist.gov/vuln/detail/CVE-2026-28986 Mon, 11 May 2026 21:18:58 +0000 High CVE-2026-28986

A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.

CVSS: 7.5 · CWE: CWE-362

View on NVD

]]> [Medium] CVE-2026-28985 – A null pointer dereference was addressed with improved input validation. This is... https://nvd.nist.gov/vuln/detail/CVE-2026-28985 https://nvd.nist.gov/vuln/detail/CVE-2026-28985 Mon, 11 May 2026 21:18:58 +0000 Medium CVE-2026-28985

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5. An attacker on the local network may be able to cause a denial-of-service.

CVSS: 6.2 · CWE: CWE-476

View on NVD

]]> [High] CVE-2026-28983 – A type confusion issue was addressed with improved checks. This issue is fixed i... https://nvd.nist.gov/vuln/detail/CVE-2026-28983 https://nvd.nist.gov/vuln/detail/CVE-2026-28983 Mon, 11 May 2026 21:18:58 +0000 High CVE-2026-28983

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A remote attacker may be able to cause a denial of service.

CVSS: 7.5 · CWE: CWE-843

View on NVD

]]> [Medium] CVE-2026-28977 – The issue was addressed with improved bounds checks. This issue is fixed in iOS ... https://nvd.nist.gov/vuln/detail/CVE-2026-28977 https://nvd.nist.gov/vuln/detail/CVE-2026-28977 Mon, 11 May 2026 21:18:58 +0000 Medium CVE-2026-28977

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted file may lead to unexpected app termination.

CVSS: 6.2 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-28974 – This issue was addressed with improved checks to prevent unauthorized actions. T... https://nvd.nist.gov/vuln/detail/CVE-2026-28974 https://nvd.nist.gov/vuln/detail/CVE-2026-28974 Mon, 11 May 2026 21:18:58 +0000 High CVE-2026-28974

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause a denial-of-service.

CVSS: 7.5 · CWE: CWE-284

View on NVD

]]> [Medium] CVE-2026-28972 – An out-of-bounds write issue was addressed with improved input validation. This ... https://nvd.nist.gov/vuln/detail/CVE-2026-28972 https://nvd.nist.gov/vuln/detail/CVE-2026-28972 Mon, 11 May 2026 21:18:57 +0000 Medium CVE-2026-28972

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination or write kernel memory.

CVSS: 6.5 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-28969 – A use after free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-28969 https://nvd.nist.gov/vuln/detail/CVE-2026-28969 Mon, 11 May 2026 21:18:57 +0000 High CVE-2026-28969

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-28959 – A buffer overflow was addressed with improved bounds checking. This issue is fix... https://nvd.nist.gov/vuln/detail/CVE-2026-28959 https://nvd.nist.gov/vuln/detail/CVE-2026-28959 Mon, 11 May 2026 21:18:56 +0000 High CVE-2026-28959

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.

CVSS: 7.5 · CWE: CWE-120

View on NVD

]]> [Medium] CVE-2026-28956 – A memory corruption issue was addressed with improved input validation. This iss... https://nvd.nist.gov/vuln/detail/CVE-2026-28956 https://nvd.nist.gov/vuln/detail/CVE-2026-28956 Mon, 11 May 2026 21:18:56 +0000 Medium CVE-2026-28956

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVSS: 6.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-28955 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28955 https://nvd.nist.gov/vuln/detail/CVE-2026-28955 Mon, 11 May 2026 21:18:56 +0000 High CVE-2026-28955

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-28953 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28953 https://nvd.nist.gov/vuln/detail/CVE-2026-28953 Mon, 11 May 2026 21:18:56 +0000 High CVE-2026-28953

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-28947 – A use-after-free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-28947 https://nvd.nist.gov/vuln/detail/CVE-2026-28947 Mon, 11 May 2026 21:18:55 +0000 High CVE-2026-28947

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-28943 – A logging issue was addressed with improved data redaction. This issue is fixed ... https://nvd.nist.gov/vuln/detail/CVE-2026-28943 https://nvd.nist.gov/vuln/detail/CVE-2026-28943 Mon, 11 May 2026 21:18:55 +0000 High CVE-2026-28943

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to determine kernel memory layout.

CVSS: 7.5 · CWE: CWE-532

View on NVD

]]> [Medium] CVE-2026-28942 – A use-after-free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-28942 https://nvd.nist.gov/vuln/detail/CVE-2026-28942 Mon, 11 May 2026 21:18:55 +0000 Medium CVE-2026-28942

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS: 6.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-28940 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2026-28940 https://nvd.nist.gov/vuln/detail/CVE-2026-28940 Mon, 11 May 2026 21:18:55 +0000 High CVE-2026-28940

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing a maliciously crafted image may corrupt process memory.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2026-28920 – An information leakage was addressed with additional validation. This issue is f... https://nvd.nist.gov/vuln/detail/CVE-2026-28920 https://nvd.nist.gov/vuln/detail/CVE-2026-28920 Mon, 11 May 2026 21:18:54 +0000 Medium CVE-2026-28920

An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Visiting a maliciously crafted website may leak sensitive data.

CVSS: 6.5 · CWE: CWE-200

View on NVD

]]> [Medium] CVE-2026-28918 – An out-of-bounds access issue was addressed with improved bounds checking. This ... https://nvd.nist.gov/vuln/detail/CVE-2026-28918 https://nvd.nist.gov/vuln/detail/CVE-2026-28918 Mon, 11 May 2026 21:18:54 +0000 Medium CVE-2026-28918

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Parsing a maliciously crafted file may lead to an unexpected app termination.

CVSS: 6.5 · CWE: CWE-125

View on NVD

]]> [Medium] CVE-2026-28917 – The issue was addressed with improved input validation. This issue is fixed in S... https://nvd.nist.gov/vuln/detail/CVE-2026-28917 https://nvd.nist.gov/vuln/detail/CVE-2026-28917 Mon, 11 May 2026 21:18:54 +0000 Medium CVE-2026-28917

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 4.3 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-28913 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28913 https://nvd.nist.gov/vuln/detail/CVE-2026-28913 Mon, 11 May 2026 21:18:53 +0000 High CVE-2026-28913

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-28907 – The issue was addressed with improved input validation. This issue is fixed in S... https://nvd.nist.gov/vuln/detail/CVE-2026-28907 https://nvd.nist.gov/vuln/detail/CVE-2026-28907 Mon, 11 May 2026 21:18:53 +0000 High CVE-2026-28907

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

CVSS: 8.1 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-28905 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28905 https://nvd.nist.gov/vuln/detail/CVE-2026-28905 Mon, 11 May 2026 21:18:53 +0000 High CVE-2026-28905

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-28904 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28904 https://nvd.nist.gov/vuln/detail/CVE-2026-28904 Mon, 11 May 2026 21:18:53 +0000 High CVE-2026-28904

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2026-28903 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28903 https://nvd.nist.gov/vuln/detail/CVE-2026-28903 Mon, 11 May 2026 21:18:53 +0000 Medium CVE-2026-28903

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 6.5 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2026-28902 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28902 https://nvd.nist.gov/vuln/detail/CVE-2026-28902 Mon, 11 May 2026 21:18:53 +0000 Medium CVE-2026-28902

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 6.5 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2026-28901 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28901 https://nvd.nist.gov/vuln/detail/CVE-2026-28901 Mon, 11 May 2026 21:18:52 +0000 Medium CVE-2026-28901

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 4.3 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2026-28897 – A buffer overflow was addressed with improved input validation. This issue is fi... https://nvd.nist.gov/vuln/detail/CVE-2026-28897 https://nvd.nist.gov/vuln/detail/CVE-2026-28897 Mon, 11 May 2026 21:18:52 +0000 Medium CVE-2026-28897

A buffer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A local user may be able to cause unexpected system termination or read kernel memory.

CVSS: 6.2 · CWE: CWE-121

View on NVD

]]> [High] CVE-2026-28883 – A use-after-free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-28883 https://nvd.nist.gov/vuln/detail/CVE-2026-28883 Mon, 11 May 2026 21:18:52 +0000 High CVE-2026-28883

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 7.5 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-28860 – The issue was addressed with improved input validation. This issue is fixed in i... https://nvd.nist.gov/vuln/detail/CVE-2026-28860 https://nvd.nist.gov/vuln/detail/CVE-2026-28860 Mon, 11 May 2026 21:18:51 +0000 High CVE-2026-28860

The issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A local attacker may be able to modify the state of the Keychain.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2026-28847 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28847 https://nvd.nist.gov/vuln/detail/CVE-2026-28847 Mon, 11 May 2026 21:18:51 +0000 High CVE-2026-28847

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 8.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-28846 – A buffer overflow was addressed with improved bounds checking. This issue is fix... https://nvd.nist.gov/vuln/detail/CVE-2026-28846 https://nvd.nist.gov/vuln/detail/CVE-2026-28846 Mon, 11 May 2026 21:18:51 +0000 High CVE-2026-28846

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A remote attacker may be able to cause unexpected app termination.

CVSS: 7.5 · CWE: CWE-121

View on NVD

]]> [Critical] CVE-2026-30496 – The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01, Android 8.0.0) e... https://nvd.nist.gov/vuln/detail/CVE-2026-30496 https://nvd.nist.gov/vuln/detail/CVE-2026-30496 Thu, 07 May 2026 14:16:02 +0000 Critical CVE-2026-30496

The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01, Android 8.0.0) exposes an HTTP API on TCP port 2345 that allows full unauthenticated remote control of the device. The API supports both reading configuration (74 endpoints) and writing/modifying settings including volume, mute, brightness, power, network protocols enable/disable (including TELNET), display modes, and other projector…

CVSS: 9.8 · CWE: CWE-285

View on NVD

]]> [High] CVE-2026-30495 – The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01, Android 8.0.0) e... https://nvd.nist.gov/vuln/detail/CVE-2026-30495 https://nvd.nist.gov/vuln/detail/CVE-2026-30495 Thu, 07 May 2026 14:16:01 +0000 High CVE-2026-30495

The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01, Android 8.0.0) exposes Android Debug Bridge (ADB) on TCP port 5555 over the network without requiring authentication. The device is configured with ro.adb.secure=0, which disables RSA key verification. Additionally, a functional su binary exists at /system/xbin/su that grants root privileges without authentication. An attacker on the…

CVSS: 8.8 · CWE: CWE-285

View on NVD

]]> [Medium] CVE-2025-43210 – An out-of-bounds access issue was addressed with improved bounds checking. This ... https://nvd.nist.gov/vuln/detail/CVE-2025-43210 https://nvd.nist.gov/vuln/detail/CVE-2025-43210 Thu, 02 Apr 2026 19:20:05 +0000 Medium CVE-2025-43210

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVSS: 6.3 · CWE: CWE-125

View on NVD

]]> [Medium] CVE-2026-30867 – CocoaMQTT is a MQTT 5.0 client library for iOS and macOS written in Swift. Prior... https://nvd.nist.gov/vuln/detail/CVE-2026-30867 https://nvd.nist.gov/vuln/detail/CVE-2026-30867 Thu, 02 Apr 2026 14:16:28 +0000 Medium CVE-2026-30867

CocoaMQTT is a MQTT 5.0 client library for iOS and macOS written in Swift. Prior to version 2.2.2, a vulnerability exists in the packet parsing logic of CocoaMQTT that allows an attacker (or a compromised/malicious MQTT broker) to remotely crash the host iOS/macOS/tvOS application. If an attacker publishes the 4-byte malformed payload to a shared topic with the RETAIN flag set to true, the MQTT b…

CVSS: 5.7 · CWE: CWE-617

View on NVD

]]> [Medium] CVE-2026-28886 – A null pointer dereference was addressed with improved input validation. This is... https://nvd.nist.gov/vuln/detail/CVE-2026-28886 https://nvd.nist.gov/vuln/detail/CVE-2026-28886 Wed, 25 Mar 2026 01:17:12 +0000 Medium CVE-2026-28886

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A user in a privileged network position may be able to cause a denial-of-service.

CVSS: 5.9 · CWE: CWE-476

View on NVD

]]> [Medium] CVE-2026-28882 – This issue was addressed with improved checks. This issue is fixed in iOS 18.7.9... https://nvd.nist.gov/vuln/detail/CVE-2026-28882 https://nvd.nist.gov/vuln/detail/CVE-2026-28882 Wed, 25 Mar 2026 01:17:12 +0000 Medium CVE-2026-28882

This issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to enumerate a user's installed apps.

CVSS: 4.0 · CWE: N/A

View on NVD

]]> [Medium] CVE-2026-28879 – A use-after-free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-28879 https://nvd.nist.gov/vuln/detail/CVE-2026-28879 Wed, 25 Mar 2026 01:17:11 +0000 Medium CVE-2026-28879

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 6.5 · CWE: CWE-416

View on NVD

]]> [Medium] CVE-2026-28878 – A privacy issue was addressed by removing sensitive data. This issue is fixed in... https://nvd.nist.gov/vuln/detail/CVE-2026-28878 https://nvd.nist.gov/vuln/detail/CVE-2026-28878 Wed, 25 Mar 2026 01:17:11 +0000 Medium CVE-2026-28878

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.7, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to enumerate a user's installed apps.

CVSS: 6.5 · CWE: CWE-200

View on NVD

]]> [Medium] CVE-2026-28870 – An information leakage was addressed with additional validation. This issue is f... https://nvd.nist.gov/vuln/detail/CVE-2026-28870 https://nvd.nist.gov/vuln/detail/CVE-2026-28870 Wed, 25 Mar 2026 01:17:11 +0000 Medium CVE-2026-28870

An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to access sensitive user data.

CVSS: 5.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2026-28867 – This issue was addressed with improved authentication. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2026-28867 https://nvd.nist.gov/vuln/detail/CVE-2026-28867 Wed, 25 Mar 2026 01:17:10 +0000 Medium CVE-2026-28867

This issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to leak sensitive kernel state.

CVSS: 6.2 · CWE: N/A

View on NVD

]]> [High] CVE-2026-28865 – An authentication issue was addressed with improved state management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-28865 https://nvd.nist.gov/vuln/detail/CVE-2026-28865 Wed, 25 Mar 2026 01:17:10 +0000 High CVE-2026-28865

An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker in a privileged network position may be able to intercept network traffic.

CVSS: 7.5 · CWE: CWE-285

View on NVD

]]> [Medium] CVE-2026-28863 – A permissions issue was addressed with additional restrictions. This issue is fi... https://nvd.nist.gov/vuln/detail/CVE-2026-28863 https://nvd.nist.gov/vuln/detail/CVE-2026-28863 Wed, 25 Mar 2026 01:17:10 +0000 Medium CVE-2026-28863

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to fingerprint the user.

CVSS: 6.5 · CWE: CWE-284

View on NVD

]]> [Medium] CVE-2026-28859 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-28859 https://nvd.nist.gov/vuln/detail/CVE-2026-28859 Wed, 25 Mar 2026 01:17:10 +0000 Medium CVE-2026-28859

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A malicious website may be able to process restricted web content outside the sandbox.

CVSS: 4.3 · CWE: CWE-125

View on NVD

]]> [Medium] CVE-2026-28852 – A stack overflow was addressed with improved input validation. This issue is fix... https://nvd.nist.gov/vuln/detail/CVE-2026-28852 https://nvd.nist.gov/vuln/detail/CVE-2026-28852 Wed, 25 Mar 2026 01:17:09 +0000 Medium CVE-2026-28852

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to cause a denial-of-service.

CVSS: 5.5 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2026-28822 – A type confusion issue was addressed with improved memory handling. This issue i... https://nvd.nist.gov/vuln/detail/CVE-2026-28822 https://nvd.nist.gov/vuln/detail/CVE-2026-28822 Wed, 25 Mar 2026 01:17:07 +0000 Medium CVE-2026-28822

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker may be able to cause unexpected app termination.

CVSS: 6.2 · CWE: CWE-843

View on NVD

]]> [High] CVE-2026-20698 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2026-20698 https://nvd.nist.gov/vuln/detail/CVE-2026-20698 Wed, 25 Mar 2026 01:17:06 +0000 High CVE-2026-20698

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVSS: 7.8 · CWE: CWE-787

View on NVD

]]> [Medium] CVE-2026-20690 – An out-of-bounds access issue was addressed with improved bounds checking. This ... https://nvd.nist.gov/vuln/detail/CVE-2026-20690 https://nvd.nist.gov/vuln/detail/CVE-2026-20690 Wed, 25 Mar 2026 01:17:05 +0000 Medium CVE-2026-20690

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing an audio stream in a maliciously crafted media file may terminate the process.

CVSS: 6.5 · CWE: CWE-125

View on NVD

]]> [High] CVE-2026-20687 – A use after free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-20687 https://nvd.nist.gov/vuln/detail/CVE-2026-20687 Wed, 25 Mar 2026 01:17:05 +0000 High CVE-2026-20687

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or write kernel memory.

CVSS: 7.1 · CWE: CWE-416

View on NVD

]]> [Medium] CVE-2026-20665 – This issue was addressed through improved state management. This issue is fixed ... https://nvd.nist.gov/vuln/detail/CVE-2026-20665 https://nvd.nist.gov/vuln/detail/CVE-2026-20665 Wed, 25 Mar 2026 01:17:05 +0000 Medium CVE-2026-20665

This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

CVSS: 6.5 · CWE: CWE-693

View on NVD

]]> [Medium] CVE-2026-20637 – A use after free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2026-20637 https://nvd.nist.gov/vuln/detail/CVE-2026-20637 Wed, 25 Mar 2026 01:17:04 +0000 Medium CVE-2026-20637

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to cause unexpected system termination.

CVSS: 6.2 · CWE: CWE-416

View on NVD

]]> [High] CVE-2026-20700 – A memory corruption issue was addressed with improved state management. This iss... https://nvd.nist.gov/vuln/detail/CVE-2026-20700 https://nvd.nist.gov/vuln/detail/CVE-2026-20700 Wed, 11 Feb 2026 23:16:10 +0000 High CVE-2026-20700

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individual…

CVSS: 7.8 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2026-20675 – The issue was addressed with improved bounds checks. This issue is fixed in iOS ... https://nvd.nist.gov/vuln/detail/CVE-2026-20675 https://nvd.nist.gov/vuln/detail/CVE-2026-20675 Wed, 11 Feb 2026 23:16:09 +0000 Medium CVE-2026-20675

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted image may lead to disclosure of user information.

CVSS: 5.5 · CWE: CWE-77

View on NVD

]]> [Low] CVE-2026-20671 – A logic issue was addressed with improved checks. This issue is fixed in iOS 18... https://nvd.nist.gov/vuln/detail/CVE-2026-20671 https://nvd.nist.gov/vuln/detail/CVE-2026-20671 Wed, 11 Feb 2026 23:16:09 +0000 Low CVE-2026-20671

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker in a privileged network position may be able to intercept network traffic.

CVSS: 3.1 · CWE: CWE-77

View on NVD

]]> [Medium] CVE-2026-20654 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2026-20654 https://nvd.nist.gov/vuln/detail/CVE-2026-20654 Wed, 11 Feb 2026 23:16:08 +0000 Medium CVE-2026-20654

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to cause unexpected system termination.

CVSS: 5.5 · CWE: CWE-119

View on NVD

]]> [High] CVE-2026-20650 – A denial-of-service issue was addressed with improved validation. This issue is ... https://nvd.nist.gov/vuln/detail/CVE-2026-20650 https://nvd.nist.gov/vuln/detail/CVE-2026-20650 Wed, 11 Feb 2026 23:16:07 +0000 High CVE-2026-20650

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Bluetooth packets.

CVSS: 7.5 · CWE: CWE-400

View on NVD

]]> [High] CVE-2026-20649 – A logging issue was addressed with improved data redaction. This issue is fixed ... https://nvd.nist.gov/vuln/detail/CVE-2026-20649 https://nvd.nist.gov/vuln/detail/CVE-2026-20649 Wed, 11 Feb 2026 23:16:07 +0000 High CVE-2026-20649

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3. A user may be able to view sensitive user information.

CVSS: 7.5 · CWE: CWE-377

View on NVD

]]> [High] CVE-2026-20641 – A privacy issue was addressed with improved checks. This issue is fixed in iOS 1... https://nvd.nist.gov/vuln/detail/CVE-2026-20641 https://nvd.nist.gov/vuln/detail/CVE-2026-20641 Wed, 11 Feb 2026 23:16:07 +0000 High CVE-2026-20641

A privacy issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to identify what other apps a user has installed.

CVSS: 7.1 · CWE: CWE-200

View on NVD

]]> [Medium] CVE-2026-20635 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2026-20635 https://nvd.nist.gov/vuln/detail/CVE-2026-20635 Wed, 11 Feb 2026 23:16:06 +0000 Medium CVE-2026-20635

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 4.3 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2026-20634 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2026-20634 https://nvd.nist.gov/vuln/detail/CVE-2026-20634 Wed, 11 Feb 2026 23:16:06 +0000 Medium CVE-2026-20634

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted image may result in disclosure of process memory.

CVSS: 5.5 · CWE: N/A

View on NVD

]]> [High] CVE-2026-20628 – A permissions issue was addressed with additional restrictions. This issue is fi... https://nvd.nist.gov/vuln/detail/CVE-2026-20628 https://nvd.nist.gov/vuln/detail/CVE-2026-20628 Wed, 11 Feb 2026 23:16:06 +0000 High CVE-2026-20628

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to break out of its sandbox.

CVSS: 7.1 · CWE: CWE-284

View on NVD

]]> [High] CVE-2026-20617 – A race condition was addressed with improved state handling. This issue is fixed... https://nvd.nist.gov/vuln/detail/CVE-2026-20617 https://nvd.nist.gov/vuln/detail/CVE-2026-20617 Wed, 11 Feb 2026 23:16:05 +0000 High CVE-2026-20617

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to gain root privileges.

CVSS: 7.0 · CWE: CWE-362

View on NVD

]]> [High] CVE-2026-20611 – An out-of-bounds access issue was addressed with improved bounds checking. This ... https://nvd.nist.gov/vuln/detail/CVE-2026-20611 https://nvd.nist.gov/vuln/detail/CVE-2026-20611 Wed, 11 Feb 2026 23:16:04 +0000 High CVE-2026-20611

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVSS: 7.8 · CWE: CWE-125

View on NVD

]]> [Medium] CVE-2026-20609 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2026-20609 https://nvd.nist.gov/vuln/detail/CVE-2026-20609 Wed, 11 Feb 2026 23:16:04 +0000 Medium CVE-2026-20609

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.

CVSS: 4.4 · CWE: CWE-125

View on NVD

]]> [Medium] CVE-2025-46305 – The issue was addressed with improved bounds checks. This issue is fixed in iOS ... https://nvd.nist.gov/vuln/detail/CVE-2025-46305 https://nvd.nist.gov/vuln/detail/CVE-2025-46305 Wed, 11 Feb 2026 23:16:03 +0000 Medium CVE-2025-46305

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.

CVSS: 5.7 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2025-46304 – The issue was addressed with improved bounds checks. This issue is fixed in iOS ... https://nvd.nist.gov/vuln/detail/CVE-2025-46304 https://nvd.nist.gov/vuln/detail/CVE-2025-46304 Wed, 11 Feb 2026 23:16:02 +0000 Medium CVE-2025-46304

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.

CVSS: 5.7 · CWE: CWE-400

View on NVD

]]> [Medium] CVE-2025-46303 – The issue was addressed with improved bounds checks. This issue is fixed in iOS ... https://nvd.nist.gov/vuln/detail/CVE-2025-46303 https://nvd.nist.gov/vuln/detail/CVE-2025-46303 Wed, 11 Feb 2026 23:16:02 +0000 Medium CVE-2025-46303

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.

CVSS: 5.7 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2025-46302 – The issue was addressed with improved bounds checks. This issue is fixed in iOS ... https://nvd.nist.gov/vuln/detail/CVE-2025-46302 https://nvd.nist.gov/vuln/detail/CVE-2025-46302 Wed, 11 Feb 2026 23:16:02 +0000 Medium CVE-2025-46302

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.

CVSS: 5.7 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2025-46301 – The issue was addressed with improved bounds checks. This issue is fixed in iOS ... https://nvd.nist.gov/vuln/detail/CVE-2025-46301 https://nvd.nist.gov/vuln/detail/CVE-2025-46301 Wed, 11 Feb 2026 23:16:02 +0000 Medium CVE-2025-46301

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.

CVSS: 5.7 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2025-46300 – The issue was addressed with improved bounds checks. This issue is fixed in iOS ... https://nvd.nist.gov/vuln/detail/CVE-2025-46300 https://nvd.nist.gov/vuln/detail/CVE-2025-46300 Wed, 11 Feb 2026 23:16:02 +0000 Medium CVE-2025-46300

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.

CVSS: 5.7 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2025-46299 – A memory initialization issue was addressed with improved memory handling. This ... https://nvd.nist.gov/vuln/detail/CVE-2025-46299 https://nvd.nist.gov/vuln/detail/CVE-2025-46299 Fri, 09 Jan 2026 22:15:59 +0000 Medium CVE-2025-46299

A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may disclose internal states of the app.

CVSS: 4.3 · CWE: CWE-284

View on NVD

]]> [Medium] CVE-2025-46298 – The issue was addressed with improved memory handling. This issue is fixed in Sa... https://nvd.nist.gov/vuln/detail/CVE-2025-46298 https://nvd.nist.gov/vuln/detail/CVE-2025-46298 Fri, 09 Jan 2026 22:15:59 +0000 Medium CVE-2025-46298

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 6.5 · CWE: CWE-119

View on NVD

]]> [Low] CVE-2025-46279 – A permissions issue was addressed with additional restrictions. This issue is fi... https://nvd.nist.gov/vuln/detail/CVE-2025-46279 https://nvd.nist.gov/vuln/detail/CVE-2025-46279 Wed, 17 Dec 2025 21:16:13 +0000 Low CVE-2025-46279

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to identify what other apps a user has installed.

CVSS: 3.3 · CWE: CWE-200

View on NVD

]]> [Medium] CVE-2025-43533 – The issue was addressed with improved bounds checks. This issue is fixed in iOS ... https://nvd.nist.gov/vuln/detail/CVE-2025-43533 https://nvd.nist.gov/vuln/detail/CVE-2025-43533 Wed, 17 Dec 2025 21:16:12 +0000 Medium CVE-2025-43533

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.

CVSS: 5.7 · CWE: CWE-20

View on NVD

]]> [Low] CVE-2025-43531 – A race condition was addressed with improved state handling. This issue is fixed... https://nvd.nist.gov/vuln/detail/CVE-2025-43531 https://nvd.nist.gov/vuln/detail/CVE-2025-43531 Wed, 17 Dec 2025 21:16:11 +0000 Low CVE-2025-43531

A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS: 3.1 · CWE: CWE-362

View on NVD

]]> [High] CVE-2025-43529 – A use-after-free issue was addressed with improved memory management. This issue... https://nvd.nist.gov/vuln/detail/CVE-2025-43529 https://nvd.nist.gov/vuln/detail/CVE-2025-43529 Wed, 17 Dec 2025 21:16:11 +0000 High CVE-2025-43529

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated a…

CVSS: 8.8 · CWE: CWE-416

View on NVD

]]> [High] CVE-2025-46285 – An integer overflow was addressed by adopting 64-bit timestamps. This issue is f... https://nvd.nist.gov/vuln/detail/CVE-2025-46285 https://nvd.nist.gov/vuln/detail/CVE-2025-46285 Fri, 12 Dec 2025 21:15:57 +0000 High CVE-2025-46285

An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to gain root privileges.

CVSS: 7.8 · CWE: CWE-190

View on NVD

]]> [High] CVE-2025-43539 – The issue was addressed with improved bounds checks. This issue is fixed in iOS ... https://nvd.nist.gov/vuln/detail/CVE-2025-43539 https://nvd.nist.gov/vuln/detail/CVE-2025-43539 Fri, 12 Dec 2025 21:15:57 +0000 High CVE-2025-43539

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing a file may lead to memory corruption.

CVSS: 8.8 · CWE: CWE-787

View on NVD

]]> [Low] CVE-2025-43532 – A memory corruption issue was addressed with improved bounds checking. This issu... https://nvd.nist.gov/vuln/detail/CVE-2025-43532 https://nvd.nist.gov/vuln/detail/CVE-2025-43532 Fri, 12 Dec 2025 21:15:57 +0000 Low CVE-2025-43532

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing malicious data may lead to unexpected app termination.

CVSS: 2.8 · CWE: CWE-120

View on NVD

]]> [Medium] CVE-2025-43520 – A memory corruption issue was addressed with improved memory handling. This issu... https://nvd.nist.gov/vuln/detail/CVE-2025-43520 https://nvd.nist.gov/vuln/detail/CVE-2025-43520 Fri, 12 Dec 2025 21:15:56 +0000 Medium CVE-2025-43520

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may be able to cause unexpected system termination or write kernel memory.

CVSS: 5.5 · CWE: CWE-120

View on NVD

]]> [High] CVE-2025-43510 – A memory corruption issue was addressed with improved lock state checking. This ... https://nvd.nist.gov/vuln/detail/CVE-2025-43510 https://nvd.nist.gov/vuln/detail/CVE-2025-43510 Fri, 12 Dec 2025 21:15:55 +0000 High CVE-2025-43510

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpected changes in memory shared between processes.

CVSS: 7.8 · CWE: CWE-667

View on NVD

]]> [Medium] CVE-2025-43374 – An out-of-bounds read was addressed with improved bounds checking. This issue is... https://nvd.nist.gov/vuln/detail/CVE-2025-43374 https://nvd.nist.gov/vuln/detail/CVE-2025-43374 Fri, 21 Nov 2025 22:16:19 +0000 Medium CVE-2025-43374

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.5, visionOS 2.5, watchOS 11.5. An attacker in physical proximity may be able to cause an out-of-bounds read in kernel memory.

CVSS: 4.3 · CWE: CWE-121

View on NVD

]]> [Medium] CVE-2025-43205 – An out-of-bounds access issue was addressed with improved bounds checking. This ... https://nvd.nist.gov/vuln/detail/CVE-2025-43205 https://nvd.nist.gov/vuln/detail/CVE-2025-43205 Wed, 12 Nov 2025 01:15:34 +0000 Medium CVE-2025-43205

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to bypass ASLR.

CVSS: 4.0 · CWE: CWE-125

View on NVD

]]> [High] CVE-2025-43480 – The issue was addressed with improved checks. This issue is fixed in Safari 26.1... https://nvd.nist.gov/vuln/detail/CVE-2025-43480 https://nvd.nist.gov/vuln/detail/CVE-2025-43480 Tue, 04 Nov 2025 02:15:52 +0000 High CVE-2025-43480

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin.

CVSS: 8.1 · CWE: CWE-942

View on NVD

]]> [High] CVE-2025-43462 – The issue was addressed with improved memory handling. This issue is fixed in iO... https://nvd.nist.gov/vuln/detail/CVE-2025-43462 https://nvd.nist.gov/vuln/detail/CVE-2025-43462 Tue, 04 Nov 2025 02:15:51 +0000 High CVE-2025-43462

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVSS: 7.5 · CWE: CWE-400

View on NVD

]]>