Vulnerabilities

Tracked app vulnerabilities

73 entries

All CVEs 16,158 CISA KEV 285 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2026-28957 LOW 3.3 Local 2026-05-11 An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, v…	LOW 3.3	Local	—	—	2026-05-11	An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, v…
CVE-2026-28864 LOW 3.3 Local 2026-03-25 This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.…	LOW 3.3	Local	—	—	2026-03-25	This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.…
CVE-2026-20671 LOW 3.1 Network 2026-02-11 A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS So…	LOW 3.1	Network	—	—	2026-02-11	A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS So…
CVE-2026-20663 LOW 3.3 Local 2026-02-11 The issue was resolved by sanitizing logging. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An app may be able to enumerate a …	LOW 3.3	Local	—	—	2026-02-11	The issue was resolved by sanitizing logging. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An app may be able to enumerate a …
CVE-2026-20656 LOW 3.3 Local 2026-02-11 A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to…	LOW 3.3	Local	—	—	2026-02-11	A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to…
CVE-2026-20642 LOW 2.4 Physical 2026-02-11 An input validation issue was addressed. This issue is fixed in iOS 26.3 and iPadOS 26.3. A person with physical access to an iOS device may be able to access …	LOW 2.4	Physical	—	—	2026-02-11	An input validation issue was addressed. This issue is fixed in iOS 26.3 and iPadOS 26.3. A person with physical access to an iOS device may be able to access …
CVE-2025-24090 LOW 3.3 Local 2026-01-16 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3. An app may be able to enumerate a user's insta…	LOW 3.3	Local	—	—	2026-01-16	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3. An app may be able to enumerate a user's insta…
CVE-2024-54556 LOW 2.4 Physical 2026-01-16 This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. A user may be able to view restricted content from…	LOW 2.4	Physical	—	—	2026-01-16	This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. A user may be able to view restricted content from…
CVE-2025-46279 LOW 3.3 Local 2025-12-17 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2…	LOW 3.3	Local	—	—	2025-12-17	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2…
CVE-2025-46277 LOW 3.3 Local 2025-12-17 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, watchOS 26.2. An app may be able…	LOW 3.3	Local	—	—	2025-12-17	A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, watchOS 26.2. An app may be able…
CVE-2025-43531 LOW 3.1 Network 2025-12-17 A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS …	LOW 3.1	Network	—	—	2025-12-17	A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS …
CVE-2025-43532 LOW 2.8 Local 2025-12-12 A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Seq…	LOW 2.8	Local	—	—	2025-12-12	A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Seq…
CVE-2025-43518 LOW 3.3 Local 2025-12-12 A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2,…	LOW 3.3	Local	—	—	2025-12-12	A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2,…
CVE-2025-43437 LOW 3.3 Local 2025-12-12 An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 26.1 and iPadOS 26.1. An app may be able to fingerprin…	LOW 3.3	Local	—	—	2025-12-12	An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 26.1 and iPadOS 26.1. An app may be able to fingerprin…
CVE-2025-31216 LOW 2.4 Physical 2025-11-21 The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. An attacker with physical access to a device may …	LOW 2.4	Physical	—	—	2025-11-21	The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. An attacker with physical access to a device may …
CVE-2025-43442 LOW 3.3 Local 2025-11-04 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be ab…	LOW 3.3	Local	—	—	2025-11-04	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be ab…
CVE-2025-43423 LOW 2.0 Physical 2025-11-04 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2…	LOW 2.0	Physical	—	—	2025-11-04	A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2…
CVE-2025-43365 LOW 2.8 Local 2025-11-04 A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26 and iPadOS 26. An unprivile…	LOW 2.8	Local	—	—	2025-11-04	A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26 and iPadOS 26. An unprivile…
CVE-2025-43350 LOW 2.4 Physical 2025-11-04 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker may be able to view restricted con…	LOW 2.4	Physical	—	—	2025-11-04	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker may be able to view restricted con…
CVE-2025-43309 LOW 2.4 Physical 2025-11-04 A logic issue was addressed with improved checks. This issue is fixed in iOS 26 and iPadOS 26. An attacker with physical access to an iOS device may be able to…	LOW 2.4	Physical	—	—	2025-11-04	A logic issue was addressed with improved checks. This issue is fixed in iOS 26 and iPadOS 26. An attacker with physical access to an iOS device may be able to…
CVE-2025-43357 LOW 3.3 Local 2025-09-15 This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia…	LOW 3.3	Local	—	—	2025-09-15	This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia…
CVE-2025-43349 LOW 2.8 Local 2025-09-15 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia…	LOW 2.8	Local	—	—	2025-09-15	An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia…
CVE-2025-43344 LOW 3.3 Local 2025-09-15 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, w…	LOW 3.3	Local	—	—	2025-09-15	An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, w…
CVE-2025-43294 LOW 3.3 Local 2025-09-15 An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, …	LOW 3.3	Local	—	—	2025-09-15	An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, …
CVE-2025-49462 LOW 3.5 Network 4 apps 2025-07-10 Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.	LOW 3.5	Network	—	4	2025-07-10	Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.
CVE-2025-49731 LOW 3.1 Network 2 apps 2025-07-08 Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.	LOW 3.1	Network	—	2	2025-07-08	Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
CVE-2025-5918 LOW 3.9 Local 2025-06-09 A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for rea…	LOW 3.9	Local	—	—	2025-06-09	A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for rea…
CVE-2025-31185 LOW 3.3 Local 2025-05-19 A logic issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3. Photos in the Hidden Photos Album may be viewed without auth…	LOW 3.3	Local	—	—	2025-05-19	A logic issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3. Photos in the Hidden Photos Album may be viewed without auth…
CVE-2025-30469 LOW 2.4 Physical 2025-03-31 This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may…	LOW 2.4	Physical	—	—	2025-03-31	This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may…
CVE-2025-24193 LOW 2.4 Physical 2025-03-31 This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked devi…	LOW 2.4	Physical	—	—	2025-03-31	This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked devi…
CVE-2024-40864 LOW 2.7 Network 2025-03-31 The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ve…	LOW 2.7	Network	—	—	2025-03-31	The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ve…
CVE-2025-27113 LOW 2.9 2025-03-31 [Apple libxml2] Parsing a file may lead to an unexpected app termination	LOW 2.9	—	—	—	2025-03-31	[Apple libxml2] Parsing a file may lead to an unexpected app termination
CVE-2024-54558 LOW 2.8 Local 2025-03-10 A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be abl…	LOW 2.8	Local	—	—	2025-03-10	A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be abl…
CVE-2024-44179 LOW 2.4 Physical 2025-03-10 This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoi…	LOW 2.4	Physical	—	—	2025-03-10	This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoi…
CVE-2025-24145 LOW 3.3 Local 2025-01-27 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. An app…	LOW 3.3	Local	—	—	2025-01-27	A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. An app…
CVE-2025-24141 LOW 3.3 Local 2025-01-27 An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.3 and iPadOS 18.3. An attacker with physical access to an u…	LOW 3.3	Local	—	—	2025-01-27	An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.3 and iPadOS 18.3. An attacker with physical access to an u…
CVE-2024-40839 LOW 2.4 Physical 2025-01-15 This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device …	LOW 2.4	Physical	—	—	2025-01-15	This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device …
CVE-2024-54485 LOW 2.4 Physical 2024-12-12 The issue was addressed by adding additional logic. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2. An attacker with physic…	LOW 2.4	Physical	—	—	2024-12-12	The issue was addressed by adding additional logic. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2. An attacker with physic…
CVE-2024-44290 LOW 3.3 Local 2024-12-12 This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, watchOS 11.1. A…	LOW 3.3	Local	—	—	2024-12-12	This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, watchOS 11.1. A…
CVE-2024-44200 LOW 3.3 Local 2024-12-12 This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An app may be a…	LOW 3.3	Local	—	—	2024-12-12	This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An app may be a…
CVE-2024-44251 LOW 2.4 Physical 2024-10-28 This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker may be able to view restricted content…	LOW 2.4	Physical	—	—	2024-10-28	This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker may be able to view restricted content…
CVE-2024-44123 LOW 2.3 Local 2024-10-28 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. A malicious app with root privil…	LOW 2.3	Local	—	—	2024-10-28	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. A malicious app with root privil…
CVE-2024-40853 LOW 3.3 Local 2024-10-28 This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18 and iPadOS 18. An attacker may be able to use Siri to…	LOW 3.3	Local	—	—	2024-10-28	This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18 and iPadOS 18. An attacker may be able to use Siri to…
CVE-2024-40851 LOW 2.4 Physical 2024-10-28 This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker with physical access m…	LOW 2.4	Physical	—	—	2024-10-28	This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker with physical access m…
CVE-2024-44180 LOW 2.4 Physical 2024-09-17 The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from…	LOW 2.4	Physical	—	—	2024-09-17	The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from…
CVE-2024-44139 LOW 2.4 Physical 2024-09-17 The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from…	LOW 2.4	Physical	—	—	2024-09-17	The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from…
CVE-2024-40830 LOW 3.3 Local 2024-09-17 This issue was addressed with improved data protection. This issue is fixed in iOS 18 and iPadOS 18. An app may be able to enumerate a user's installed apps.	LOW 3.3	Local	—	—	2024-09-17	This issue was addressed with improved data protection. This issue is fixed in iOS 18 and iPadOS 18. An app may be able to enumerate a user's installed apps.
CVE-2024-40791 LOW 3.3 Local 2024-09-17 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macO…	LOW 3.3	Local	—	—	2024-09-17	A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macO…
CVE-2024-40822 LOW 2.4 Physical 2024-07-29 This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macO…	LOW 2.4	Physical	—	—	2024-07-29	This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macO…
CVE-2024-40798 LOW 3.3 Local 2024-07-29 This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS So…	LOW 3.3	Local	—	—	2024-07-29	This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS So…