CVE-2026-65414

CVE-2026-65414 is an out-of-bounds write vulnerability across multiple Apple platforms, addressed through improved bounds checking . A remote attacker with no privileges or user interaction may cause unexpected app termination or arbitrary code execution , rated CVSS 9.8 (Critical) . The fix is a...

CVE-2025-43444

CVE-2025-43444 is a permissions issue described by Apple and Red Hat sources, resolved in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1, iPadOS 26.1, iOS 18.7.2, iPadOS 18.7.2, and visionOS 26.1. The issue could allow an app to fingerprint the user without interaction. Public material speci...

CVE-2026-28846

CVE-2026-28846 is a buffer overflow vulnerability addressed by Apple via bounds checking improvements. The NVD entry states the issue affects multiple Apple operating systems and is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS T...

CVE-2026-28977

CVE-2026-28977 affects Apple platforms, with the issue traced to ImageIO handling of maliciously crafted images. The root cause is a bounds-checking/memory handling flaw that could cause an app termination. Fixed in macOS Sonoma 14.8.7, macOS Tahoe 26.5, macOS Sequoia 15.7.7, iOS/iPadOS 18.7.9, i...

CVE-2025-43234

CVE-2025-43234 involves multiple memory corruption issues fixed by improved input validation in Apple platforms. The NVD entry states vulnerable components are tied to texture handling, with successful exploitation potentially causing an app to terminate unexpectedly. Affected products and fixed ...

CVE-2025-43442

CVE-2025-43442 is an Apple iOS/iPadOS vulnerability described as a permissions issue that could allow an app to identify which other apps a user has installed. The connected Apple security content specifies the impact and fix: the issue is resolved in iOS 18.7.2 and iPadOS 18.7.2, and again in iO...

CVE-2025-43500

The CVE-2025-43500 privacy issue affects Apple platforms (iOS, iPadOS, watchOS, macOS Tahoe, visionOS) and is caused by improved handling of user preferences, with a fixed release in version 26.1. The issue could allow an app to access sensitive user data, as indicated by the description and CVSS...

CVE-2025-43533

CVE-2025-43533 concerns a vulnerability in Apple’s Multi-Touch handling where a malicious HID device could trigger an unexpected process crash. The issue stems from insufficient bounds checking, with fixes described as improved bounds checks and memory handling. Affected products include iOS/iPad...

CVE-2026-20657

CVE-2026-20657 affects Apple platforms and is marked as fixed in iOS 18.7.7/iPadOS 18.7.7, macOS Sequoia 15.7.5, and macOS Sonoma 14.8.5. The issue is described as a memory handling problem that could cause an unexpected app termination when parsing a maliciously crafted file. The Practical impac...

CVE-2026-28920

CVE-2026-28920 describes an information-leakage issue that Apple fixed by adding input/validation checks. The vulnerability affects multiple Apple platforms and is mitigated by updates: iOS/iPadOS 18.7.9 and 26.5, macOS Sequoia 15.7.7, Sonoma 14.8.7, Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS ...

CVE-2026-28984

Apple addressed a memory-handling flaw in Safari's WebKit engine on iOS/iPadOS 18.7.10. Malicious web content could crash Safari (availability impact only, CVSS 4.3). CISA SSVC rates exploitation as none; update to iOS/iPadOS 18.7.10 to remediate. No in-the-wild exploitation reported.

CVE-2025-31216

CVE-2025-31216 affects Apple iOS/iPadOS: an attacker with physical access could override managed Wi‑Fi profiles. Apple fixed this in iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5 with “improved checks.” The vulnerability is documented across NVD/Red Hat/ENISA entries, tying to Wi‑Fi profile handling. R...

CVE-2025-43203

CVE-2025-43203 affects Apple iOS and iPadOS (versions prior to 18.7/26). The issue is a cache-handling vulnerability that could allow a local attacker with physical access to an unlocked device to view an image in the most recently viewed locked note. Root cause: improper cache handling that perm...

CVE-2025-43282

CVE-2025-43282 is a memory-management issue (double free) fixed by Apple in multiple platforms. Affected components involve Apple OS memory handling, with root cause described as a double-free leading to possible system termination. Fixed in macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, watchOS 1...

CVE-2025-46288

The CVE affects Apple platforms (visionOS, iOS, iPadOS, watchOS, macOS Tahoe) with a permissions issue that could allow an app to access sensitive payment tokens. Root cause is insufficient privilege restrictions; the issue is fixed in visionOS 26.2, iOS 26.2, iPadOS 26.2, watchOS 26.2, and macOS...

CVE-2025-46311

Technical details for CVE-2025-46311 are not publicly available in the supplied documents. Monitor for updates from Apple and security advisories to determine affected products, impact, and fixes.

CVE-2026-20674

CVE-2026-20674 affects iOS and iPadOS. The issue is described as a privacy problem where an attacker with physical access to a locked device could view sensitive user information. Apple’s security content confirms the vulnerability and its fix in iOS 26.3 and iPadOS 26.3. Red Hat and NVD entries ...

CVE-2026-20694

CVE-2026-20694 affects Apple platforms where improved handling of symlinks mitigates a data-leak risk. Affected products include iOS 26.3/iPadOS 26.3, macOS Sequoia 15.7.4–15.7.5, macOS Sonoma 14.8.4–14.8.5, and macOS Tahoe 26.3–26.4. The issue could allow an app to access user-sensitive data. re...

CVE-2026-28822

CVE-2026-28822 describes a type confusion vulnerability in Apple OS components that is mitigated by improved memory handling. The issue is fixed in multiple Apple platforms: iOS 26.4 and iPadOS 26.4; macOS Sequoia 15.7.5, Sonoma 14.8.5, Tahoe 26.4; tvOS 26.4; visionOS 26.4; and watchOS 26.4. The ...

CVE-2026-28868

CVE-2026-28868 concerns a logging issue where data redaction was insufficient, potentially allowing an app to disclose kernel memory. It is fixed across Apple platforms in the following versions: iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, ma...

CVE-2026-28894

CVE-2026-28894 affects Apple operating systems (iOS/iPadOS 26.4; macOS Sequoia 15.7.5; macOS Sonoma 14.8.5; macOS Tahoe 26.4). The issue is a denial-of-service caused by insufficient input handling that Apple fixed by improving input validation and shipping updates. A remote attacker could trigge...

CVE-2026-43659

CVE-2026-43659 is a race condition in the Apple FileProvider component. The issue could allow an app to access sensitive user data and was mitigated by added validation. Apple fixed it in multiple platforms: iOS 18.7.9 / iPadOS 18.7.9; iOS 26.5 / iPadOS 26.5; macOS Sequoia 15.7.7; macOS Sonoma 14...

CVE-2025-43398

CVE-2025-43398 affects Apple platforms (tvOS, watchOS, macOS Tahoe, macOS Sequoia/Sonoma, iOS, iPadOS, visionOS). Root cause: memory handling issue addressed with memory improvements. Impact: an app may cause an unexpected system termination. Mitigation: fixes shipped in tvOS 26.1, watchOS 26.1, ...

CVE-2025-43407

The CVE-2025-43407 issue affects Apple platforms including tvOS 26.1, macOS Tahoe 26.1, iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and visionOS 26.1. The underlying problem is improper entitlements that could allow an app to break out of its sandbox. This is the primary ris...

CVE-2025-43462

CVE-2025-43462 is a memory-handling issue fixed in Apple platform updates 26.1 across tvOS, watchOS, macOS Tahoe, iOS, iPadOS, and visionOS. The vulnerability could allow an app to cause an unexpected system termination or corrupt kernel memory; remediation is upgrading to the affected 26.1 relea...

CVE-2025-46300

The CVE-2025-46300 issue is mitigated by Apple via updated bounds checks and affects multiple Apple OS releases. Affected components include HID handling that could cause an unexpected process crash when a malicious HID device is connected. Fixed in iOS/iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2; ma...

CVE-2025-46302

CVE-2025-46302: Apple fixed an issue causing a malicious HID device to trigger an unexpected process crash by addressing bounds-check vulnerabilities. Affected products/versions include iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe ...

CVE-2026-20638

CVE-2026-20638 affects iOS and iPadOS. A logic issue allowed identifying information to leak to Live Caller ID app extensions when those extensions were disabled by the user. Apple fixed this in iOS 26.3 and iPadOS 26.3 by applying improved checks. The vulnerability is described as a logic/contro...

CVE-2026-28974

CVE-2026-28974 affects Apple platforms and is described as a denial-of-service risk due to an issue where an app could trigger unauthorized actions. Connected advisories confirm fixes in iOS/iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Affected ...

CVE-2025-43280

CVE-2025-43280 affects Apple iOS/iPadOS Mail behavior. The vulnerability, stemming from forwarding an email in Lockdown Mode, could allow remote images to load in Mail. Apple notes the issue is resolved by not loading remote images, with fixes included in iOS 18.6 and iPadOS 18.6. The public reco...

CVE-2025-43435

CVE-2025-43435 involves a memory handling issue that could cause an unexpected process crash when processing maliciously crafted web content. Apple fixed the vulnerability in multiple platforms and versions: tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18....

CVE-2025-43448

CVE-2025-43448 is an Apple OS vulnerability where an app could break out of its sandbox due to insufficient validation of symlinks. It is addressed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, tvOS 26.1, watchOS 26.1, and ...

CVE-2026-20640

The CVE-2026-20640 entry describes an inconsistent user interface issue caused by improved state management in iOS/iPadOS. Affected software: iPhone with iOS and iPad with iPadOS, prior to version 26.3. Vulnerable component: user interface state management during iPhone Mirroring with a Mac, whic...

CVE-2026-20655

CVE-2026-20655 affects Apple iOS and iPadOS with an authorization issue that allows an attacker with physical access to a locked device to view sensitive user information. The issue is tied to improved state management and is fixed in iOS 18.7.5 / iPadOS 18.7.5 as well as iOS 26.3 / iPadOS 26.3. ...

CVE-2026-28876

CVE-2026-28876 is tied to a parsing/validation issue in directory path handling that could allow an app to access sensitive user data. Public fixes exist for multiple Apple platforms: iOS 18.7.7 / iPadOS 18.7.7; iOS 26.4 / iPadOS 26.4; macOS Sequoia 15.7.5; macOS Sonoma 14.8.5; macOS Tahoe 26.4; ...

CVE-2026-28906

CVE-2026-28906 affects Apple platforms (iOS/iPadOS 18.7.9, iOS 26.5, iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, visionOS 26.5). Description: issue addressed through improved state management; attackers may track users via their IP address. Fixes are included in the ...

CVE-2025-43426

CVE-2025-43426 affects Apple platforms (macOS Tahoe 26.1, iOS 26.1, iPadOS 26.1). Root cause: a logging issue could expose sensitive user data due to insufficient data redaction. The fix was applied in macOS Tahoe 26.1, iOS 26.1, and iPadOS 26.1 by improving data redaction in logs. Impact per sou...

CVE-2025-43428

CVE-2025-43428 affects Apple platforms (visionOS, iOS, iPadOS, macOS Tahoe) due to a configuration issue that allowed viewing photos in the Hidden Photos Album without authentication. The issue is fixed in visionOS 26.2, iOS 26.2, iPadOS 26.2, and macOS Tahoe 26.2. The Apple security notes enumer...

CVE-2025-43447

CVE-2025-43447 describes a memory handling issue that may allow a local attacker to cause an unexpected system termination or corrupt kernel memory. Affected: iOS 26.1, iPadOS 26.1, watchOS 26.1, macOS Tahoe 26.1, and visionOS 26.1 (Vision Pro). Mitigation: patch/updates released with improved me...

CVE-2026-20692

Apple resolves a privacy issue by improving handling of user preferences; fixed in iOS/iPadOS 26.4 and macOS Sequoia 15.7.5, Sonoma 14.8.5, Tahoe 26.4. The advisory notes that "Hide IP Address" and "Block All Remote Content" may not apply to all mail content. Affected products include iOS 26.4/iP...

CVE-2026-28878

CVE-2026-28878 is a Apple iOS/iPadOS/macOS security issue where an app could enumerate a user’s installed apps, disclosed as a privacy data exposure. It is addressed by removing sensitive data and patched in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sonoma 14.8.5, macOS Tahoe ...

CVE-2025-24090

CVE-2025-24090 affects Apple's iOS 18.3 and iPadOS 18.3. The issue is a permissions flaw that could allow an app to enumerate a user’s installed apps. Root cause described as a permissions issue addressed with additional restrictions; Apple notes the fix is included in iOS 18.3/iPadOS 18.3. Explo...

CVE-2025-43360

CVE-2025-43360 affects Apple iOS and iPadOS Authentication Services. The issue allowed a password field to be unintentionally revealed due to a UI-related vulnerability. Root cause and affected component are described in the public CVE; Apple fixed the issue in iOS 26 and iPadOS 26 with an improv...

CVE-2025-43383

CVE-2025-43383 is an out-of-bounds access issue resolved by improved bounds checking. Affected products/versions include tvOS 26.1, macOS Tahoe 26.1, iOS 26.1/iPadOS 26.1, iOS 18.7.2/iPadOS 18.7.2, macOS Sequoia 15.7.2, and visionOS 26.1. According to the sources, processing a maliciously crafted...

CVE-2025-43423

CVE-2025-43423 affects multiple Apple platforms including macOS Tahoe 26.1, macOS Sequoia 15.7.2, iOS 26.1/iPadOS 26.1, and iOS 18.7.2/iPadOS 18.7.2, as well as visionOS 26.1. The issue is a logging-related information disclosure that could allow an attacker with physical access to an unlocked de...

CVE-2026-64742

CVE-2026-64742 is tied to Apple platforms where an app could access sensitive user data due to insecure network transmission; the issue is addressed by mandating HTTPS. Apple fixed it in iOS/iPadOS/tvOS/visionOS/watchOS 26.6. The combined sources confirm the vulnerability involved sending informa...

CVE-2025-43389

CVE-2025-43389 is a privacy issue affecting Apple platforms. The vulnerability was addressed by removing the vulnerable code, with fixes shipped in macOS Tahoe 26.1, macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, visionOS 26.1, iOS 26.1 and iPadOS 26.1, and iOS 18.7.2 and iPadOS 18.7.2. Affected comp...

CVE-2025-46286

CVE-2025-46286 describes a logic issue in validation within BiometricKit affecting iOS and iPadOS prior to 26.2. The issue could delay the passcode requirement after Face ID enrollment when restoring from a backup. Apple’s advisories state the fix is included in iOS 26.2 and iPadOS 26.2. Impact i...

CVE-2026-28856

The CVE-2026-28856 issue is addressed with improved authentication and is fixed in iOS 26.4, iPadOS 26.4, visionOS 26.4, and watchOS 26.4. The description notes that an attacker with physical access to a locked device may view sensitive user information. The connected documents provide these vers...

CVE-2025-43362

CVE-2025-43362 affects Apple LaunchServices and relates to an issue where an app may be able to monitor keystrokes without user permission. Apple entries indicate the vulnerability was addressed with improved checks and that patches are available in iOS 18.7/iPadOS 18.7 and iOS 26/iPadOS 26. The ...