Known vulnerabilities in iPadOS 26.0.1 23A355 - page 16

Vendor: Apple Inc.
Software: iPadOS
Version: 26.0.1 23A355
Software CPE: cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Total vulnerabilities: 470
Public exploits: 6
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting iPadOS version 26.0.1 23A355 iPadOS 26.0.1 23A355 is affected by 470 vulnerabilities: 2 critical, 18 high, 93 medium, 357 low Critical High Medium Low

Vulnerabilities (470)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124406 - Exposure of sensitive information to an unauthorized actor
CVE-2026-20691
CWE-200 Medium
No
No
26.4 23E246 25.03.2026 SB2026032503
SB2026032504
SB2026032505
and 20 more
#VU124404 - Permissions, Privileges, and Access Controls
CVE-2026-28833
CWE-264 Low
No
No
26.4 23E246 25.03.2026 SB2026032504
SB2026032514
SB2026032541
#VU124403 - Permissions, Privileges, and Access Controls
CVE-2026-28880
CWE-264 Low
No
No
18.7.7 22H333, 26.4 23E246 25.03.2026 SB2026032504
SB2026032506
SB2026032507
and 3 more
#VU124402 - Memory corruption
CVE-2026-28859
CWE-119 High
No
No
26.4 23E246 25.03.2026 SB2026032503
SB2026032504
SB2026032505
and 21 more
#VU124401 - State Issues
CVE-2026-28861
CWE-371 Low
No
No
18.7.7 22H333, 26.4 23E246 25.03.2026 SB2026032503
SB2026032504
SB2026032505
and 8 more
#VU124392 - Improper input validation
CVE-2026-20692
CWE-20 Low
No
No
26.4 23E246 25.03.2026 SB2026032504
SB2026032506
SB2026032507
and 1 more
#VU124387 - Exposure of sensitive information to an unauthorized actor
CVE-2026-28870
CWE-200 Low
No
No
18.7.9 22H355, 26.4 23E246 25.03.2026 SB2026032504
SB2026032514
SB2026032539
and 3 more
#VU124363 - Use After Free
CVE-2026-20687
CWE-416 Low
No
No
18.7.7 22H333, 26.4 23E246 25.03.2026 SB2026032504
SB2026032506
SB2026032509
and 3 more
#VU124361 - Memory corruption
CVE-2026-20698
CWE-119 Low
No
No
26.4 23E246 25.03.2026 SB2026032504
SB2026032514
SB2026032539
and 2 more
#VU124355 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-28876
CWE-22 Low
No
No
18.7.7 22H333, 26.4 23E246 25.03.2026 SB2026032504
SB2026032506
SB2026032507
and 3 more
#VU124354 - Memory corruption
CVE-2026-28822
CWE-119 Low
No
No
26.4 23E246 25.03.2026 SB2026032504
SB2026032506
SB2026032507
and 4 more
#VU124352 - Improper input validation
CVE-2026-28886
CWE-20 Low
No
No
18.7.7 22H333, 26.4 23E246 25.03.2026 SB2026032504
SB2026032506
SB2026032507
and 5 more
#VU124349 - Memory corruption
CVE-2026-20690
CWE-119 Low
No
No
18.7.7 22H333, 26.4 23E246 25.03.2026 SB2026032504
SB2026032506
SB2026032507
and 5 more
#VU124348 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-28866
CWE-59 Low
No
No
18.7.7 22H333, 26.4 23E246 25.03.2026 SB2026032504
SB2026032506
SB2026032507
and 2 more
#VU124347 - Improper input validation
CVE-2026-28894
CWE-20 Low
No
No
18.7.9 22H355, 26.4 23E246 25.03.2026 SB2026032504
SB2026032506
SB2026032507
and 2 more
#VU124346 - Use After Free
CVE-2026-28879
CWE-416 Medium
No
No
18.7.7 22H333, 26.4 23E246 25.03.2026 SB2026032504
SB2026032506
SB2026032507
and 5 more
#VU124342 - Improper input validation
CVE-2026-28878
CWE-20 Low
No
No
18.7.7 22H333, 26.4 23E246 25.03.2026 SB2026032504
SB2026032507
SB2026032509
and 5 more
#VU124336 - Improper Authorization
CVE-2026-28877
CWE-285 Low
No
No
18.7.9 22H355, 26.4 23E246 25.03.2026 SB2026032504
SB2026032506
SB2026032514
and 3 more
#VU124335 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2026-28865
CWE-300 Medium
No
No
18.7.7 22H333, 26.4 23E246 25.03.2026 SB2026032504
SB2026032506
SB2026032507
and 5 more
#VU121026 - Insufficiently Protected Credentials
CVE-2025-14524
CWE-522 Low
No
No
18.7.7 22H333, 26.4 23E246 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 23 more


Showing elements 301 - 320 out of 470