Vulnerabilities

Tracked app vulnerabilities

1,040 entries

All CVEs 16,390 CISA KEV 286 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2025-43202 HIGH 8.8 Network 2026-04-02 This issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6. Processing a file may lead to memo…	HIGH 8.8	Network	—	—	2026-04-02	This issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6. Processing a file may lead to memo…
CVE-2025-64505 MEDIUM 6.1 2026-04-01 [Apple ImageIO] Processing a maliciously crafted file may lead to unexpected app termination	MEDIUM 6.1	—	—	—	2026-04-01	[Apple ImageIO] Processing a maliciously crafted file may lead to unexpected app termination
CVE-2025-14524 MEDIUM 5.3 2026-04-01 [Apple curl] An issue existed in curl which may result in unintentionally sending sensitive information via an incorrect connection	MEDIUM 5.3	—	—	—	2026-04-01	[Apple curl] An issue existed in curl which may result in unintentionally sending sensitive information via an incorrect connection
CVE-2026-28895 MEDIUM 4.6 Physical 2026-03-25 The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An attacker with physical access to an iOS device with Stolen De…	MEDIUM 4.6	Physical	—	—	2026-03-25	The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An attacker with physical access to an iOS device with Stolen De…
CVE-2026-28894 HIGH 7.5 Network 2026-03-25 A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.…	HIGH 7.5	Network	—	—	2026-03-25	A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.…
CVE-2026-28886 MEDIUM 5.9 Network 2026-03-25 A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS S…	MEDIUM 5.9	Network	—	—	2026-03-25	A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS S…
CVE-2026-28882 MEDIUM 4.0 Local 2026-03-25 This issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visi…	MEDIUM 4.0	Local	—	—	2026-03-25	This issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visi…
CVE-2026-28880 MEDIUM 6.5 Network 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15…	MEDIUM 6.5	Network	—	—	2026-03-25	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15…
CVE-2026-28879 MEDIUM 6.5 Network 2026-03-25 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequ…	MEDIUM 6.5	Network	—	—	2026-03-25	A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequ…
CVE-2026-28878 MEDIUM 6.5 Network 2026-03-25 A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.7, …	MEDIUM 6.5	Network	—	—	2026-03-25	A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.7, …
CVE-2026-28877 MEDIUM 5.5 Local 2026-03-25 An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Sequo…	MEDIUM 5.5	Local	—	—	2026-03-25	An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Sequo…
CVE-2026-28876 HIGH 7.5 Network 2026-03-25 A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 a…	HIGH 7.5	Network	—	—	2026-03-25	A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 a…
CVE-2026-28875 HIGH 7.5 Network 2026-03-25 A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial…	HIGH 7.5	Network	—	—	2026-03-25	A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial…
CVE-2026-28874 HIGH 7.5 Network 2026-03-25 The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may cause an unexpected app termination.	HIGH 7.5	Network	—	—	2026-03-25	The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may cause an unexpected app termination.
CVE-2026-28871 MEDIUM 4.3 Network 2026-03-25 A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4.…	MEDIUM 4.3	Network	—	—	2026-03-25	A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4.…
CVE-2026-28870 MEDIUM 5.5 Local 2026-03-25 An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.…	MEDIUM 5.5	Local	—	—	2026-03-25	An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.…
CVE-2026-28868 MEDIUM 5.5 Local 2026-03-25 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5…	MEDIUM 5.5	Local	—	—	2026-03-25	A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5…
CVE-2026-28867 MEDIUM 6.2 Local 2026-03-25 This issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, mac…	MEDIUM 6.2	Local	—	—	2026-03-25	This issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, mac…
CVE-2026-28866 MEDIUM 6.2 Local 2026-03-25 This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.…	MEDIUM 6.2	Local	—	—	2026-03-25	This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.…
CVE-2026-28865 HIGH 7.5 Network 2026-03-25 An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequ…	HIGH 7.5	Network	—	—	2026-03-25	An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequ…
CVE-2026-28864 LOW 3.3 Local 2026-03-25 This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.…	LOW 3.3	Local	—	—	2026-03-25	This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.…
CVE-2026-28863 MEDIUM 6.5 Network 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app…	MEDIUM 6.5	Network	—	—	2026-03-25	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app…
CVE-2026-28861 MEDIUM 4.3 Network 2026-03-25 A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS T…	MEDIUM 4.3	Network	—	—	2026-03-25	A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS T…
CVE-2026-28859 MEDIUM 4.3 Network 2026-03-25 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4…	MEDIUM 4.3	Network	—	—	2026-03-25	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4…
CVE-2026-28858 CRITICAL 9.8 Network 2026-03-25 A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected s…	CRITICAL 9.8	Network	—	—	2026-03-25	A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected s…
CVE-2026-28857 MEDIUM 6.5 Network 2026-03-25 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processin…	MEDIUM 6.5	Network	—	—	2026-03-25	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processin…
CVE-2026-28856 MEDIUM 4.6 Physical 2026-03-25 The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.4, visionOS 26.4, watchOS 26.4. An attacker with physical a…	MEDIUM 4.6	Physical	—	—	2026-03-25	The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.4, visionOS 26.4, watchOS 26.4. An attacker with physical a…
CVE-2026-28855 HIGH 7.5 Network 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3. An app may be able to access…	HIGH 7.5	Network	—	—	2026-03-25	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3. An app may be able to access…
CVE-2026-28852 MEDIUM 5.5 Local 2026-03-25 A stack overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.…	MEDIUM 5.5	Local	—	—	2026-03-25	A stack overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.…
CVE-2026-28833 MEDIUM 6.2 Local 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. An app may be…	MEDIUM 6.2	Local	—	—	2026-03-25	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. An app may be…
CVE-2026-28822 MEDIUM 6.2 Local 2026-03-25 A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5,…	MEDIUM 6.2	Local	—	—	2026-03-25	A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5,…
CVE-2026-20698 HIGH 7.8 Local 2026-03-25 The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.…	HIGH 7.8	Local	—	—	2026-03-25	The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.…
CVE-2026-20694 MEDIUM 5.5 Local 2026-03-25 This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sequoia 15.7.5, macOS…	MEDIUM 5.5	Local	—	—	2026-03-25	This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sequoia 15.7.5, macOS…
CVE-2026-20692 MEDIUM 5.3 Network 2026-03-25 A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 1…	MEDIUM 5.3	Network	—	—	2026-03-25	A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 1…
CVE-2026-20691 MEDIUM 4.3 Network 2026-03-25 An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 2…	MEDIUM 4.3	Network	—	—	2026-03-25	An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 2…
CVE-2026-20690 MEDIUM 6.5 Network 2026-03-25 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS…	MEDIUM 6.5	Network	—	—	2026-03-25	An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS…
CVE-2026-20688 CRITICAL 9.3 Local 2026-03-25 A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS…	CRITICAL 9.3	Local	—	—	2026-03-25	A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS…
CVE-2026-20687 HIGH 7.1 Local 2026-03-25 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequ…	HIGH 7.1	Local	—	—	2026-03-25	A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequ…
CVE-2026-20686 MEDIUM 5.3 Network 2026-03-25 This issue was addressed with improved input validation. This issue is fixed in iOS 26.3 and iPadOS 26.3. An app may be able to access sensitive user data.	MEDIUM 5.3	Network	—	—	2026-03-25	This issue was addressed with improved input validation. This issue is fixed in iOS 26.3 and iPadOS 26.3. An app may be able to access sensitive user data.
CVE-2026-20668 MEDIUM 5.5 Local 2026-03-25 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5…	MEDIUM 5.5	Local	—	—	2026-03-25	A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5…
CVE-2026-20665 MEDIUM 6.5 Network 2026-03-25 This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS T…	MEDIUM 6.5	Network	—	—	2026-03-25	This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS T…
CVE-2026-20664 MEDIUM 4.3 Network 2026-03-25 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processin…	MEDIUM 4.3	Network	—	—	2026-03-25	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processin…
CVE-2026-20657 MEDIUM 6.5 Network 2026-03-25 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequo…	MEDIUM 6.5	Network	—	—	2026-03-25	A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequo…
CVE-2026-20637 MEDIUM 6.2 Local 2026-03-25 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequ…	MEDIUM 6.2	Local	—	—	2026-03-25	A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequ…
CVE-2025-43534 MEDIUM 6.8 Physical 2026-03-25 A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physic…	MEDIUM 6.8	Physical	—	—	2026-03-25	A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physic…
CVE-2026-4424 HIGH 7.5 Network 2026-03-19 A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sl…	HIGH 7.5	Network	—	—	2026-03-19	A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sl…
CVE-2026-20643 MEDIUM 5.4 Network 2026-03-17 A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadO…	MEDIUM 5.4	Network	—	—	2026-03-17	A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadO…
CVE-2026-26133 HIGH 7.1 Network 13 apps 2026-03-16 AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.	HIGH 7.1	Network	—	13	2026-03-16	AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2023-43010 HIGH 8.8 Network 2026-03-12 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS 16.7.15 and iPadOS …	HIGH 8.8	Network	—	—	2026-03-12	The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS 16.7.15 and iPadOS …
CVE-2026-3784 MEDIUM 6.5 Network 2026-03-11 curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. Th…	MEDIUM 6.5	Network	—	—	2026-03-11	curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. Th…