Apple Ios And Ipados vulnerabilities

CVE-2026-43797 [MEDIUM] CWE-200 CVE-2026-43797: This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10 This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6. An app may be able to access information about a user's contacts.

CVE-2026-43796 [MEDIUM] CWE-200 CVE-2026-43796: This issue was addressed with improved data protection. This issue is fixed in iOS 18.7.10 and iPadO This issue was addressed with improved data protection. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier.

CVE-2026-64721 [MEDIUM] CWE-664 CVE-2026-64721: This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and i This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.

CVE-2026-43801 [MEDIUM] CWE-200 CVE-2026-43801: This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10 This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.

CVE-2026-64709 [MEDIUM] CWE-200 CVE-2026-64709: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to disclose kernel memory.

CVE-2026-43714 [MEDIUM] CWE-20 CVE-2026-43714: The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPa The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. A malicious app may be able to access protected user data.

CVE-2025-43439 [MEDIUM] CWE-359 CVE-2025-43439: A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.2 and iPad A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to fingerprint the user.

CVE-2024-44147 [MEDIUM] CWE-269 CVE-2024-44147: This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An app may gain unauthorized access to Local Network.

CVE-2026-64723 [MEDIUM] CWE-284 CVE-2026-64723: A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7 A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data.

CVE-2026-20668 [MEDIUM] CWE-532 CVE-2026-20668: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iP A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, visionOS 26.3. An app may be able to access sensitive user data.

CVE-2026-20653 [MEDIUM] CWE-22 CVE-2026-20653: A parsing issue in the handling of directory paths was addressed with improved path validation. This A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. An app may be able to access sensitive user data.

CVE-2026-20627 [MEDIUM] CWE-20 CVE-2026-20627: An issue existed in the handling of environment variables. This issue was addressed with improved va An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3, watchOS 26.3. An app may be able to access sensitive user data.

CVE-2025-43345 [MEDIUM] CWE-200 CVE-2025-43345: A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 1 A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.

CVE-2026-28958 [MEDIUM] CWE-200 CVE-2026-28958: This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7 This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.

CVE-2025-46292 [MEDIUM] CWE-284 CVE-2025-46292: This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.3 and i This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. An app may be able to access user-sensitive data.

CVE-2026-28988 [MEDIUM] CWE-284 CVE-2026-28988: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5, watchOS 26.5. An app may be able to bypass certain Privacy preferences.

CVE-2025-46306 [MEDIUM] CWE-125 CVE-2025-46306: The issue was addressed with improved bounds checks. This issue is fixed in Keynote 15.1, iOS 26 and The issue was addressed with improved bounds checks. This issue is fixed in Keynote 15.1, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing a maliciously crafted Keynote file may disclose memory contents.

CVE-2026-28993 [MEDIUM] CWE-284 CVE-2026-28993: This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access user-sensitive data.

CVE-2026-20655 [MEDIUM] CWE-287 CVE-2026-20655: An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7 An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker with physical access to a locked device may be able to view sensitive user information.

CVE-2023-23494 [MEDIUM] CWE-120 CVE-2023-23494: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and i A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. A user in a privileged network position may be able to cause a denial-of-service.