Known vulnerabilities in iPadOS 26.1 23B85 - page 15
Vendor:
Apple Inc.
Software:
iPadOS
Version:
26.1 23B85
Software CPE:
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Website:
https://apple.com
Total vulnerabilities:
418
Public exploits:
5
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
27.0 24A437
26.7 23H24
26.6.2 23G90
18.7.10 22H374
26.6.1 23G83
26.6 23G71
26.5.2 23F84
26.5 23F77
18.7.9 22H355
17.7.11
16.7.16 20H392
15.8.8 19H422
18.7.8 22H352
18.7.7 22H340
26.4.2 23E261
26.4.1 23E254
26.4 23E246
18.7.7 22H333
18.7.6 22H320
26.3.1 (a) 23D771330a
26.3.1 23D8133
15.8.7 19H411
15.8.6 19H402
16.7.15 20H380
16.7.14 20H370
16.7.13 20H365
18.7.5 22H311
18.7.4 22H218
26.3 23D127
26.2.1 23C71
18.7.3 22H217
26.2 23C55
18.7.2 22H124
26.1 23B85
18.7.1 22H31
26.0.1 23A355
16.7.12 20H364
15.8.5 19H394
26.0 23A341
26.0 23A330
18.7 22H20
17.7.10
18.6.2 22G100
18.6.1 22G90
17.7.9
17.7.8
18.6 22G86
17.7.7
18.5 22F76
18.4.1 22E252
18.4 22E240
17.7.6
15.8.4 19H390
15.8.3 19H386
15.8.2 19H384
16.7.11
16.7.10
18.3.2 22D82
17.7.5
18.3.1 22D72
17.7.4
18.3 22D60
18.2 22C152
17.7.3
18.1.1 22B83
17.7.2 21H216
18.1 22B83
17.7.1 21H216
18.0.1 22A3370
18.0 22A3354
17.7 21H16
17.6.1 21G93
16.7.9 20H348
17.6 21G80
17.5.1 21F90
17.5 21F79
16.7.8
17.4.1 21E236
16.7.7
17.4 21E217
17.3.1 21D61
16.7.6
15.8.1 19H380
17.3 21D50
17.2.1 21C66
16.7.5
16.7.4
17.2 21C62
16.7.3
17.1.2
17.1
16.7.2
15.8 19H370
16.7.1
17.0.3
17.0.2
17.0.1
17.0
16.7
15.7.9 19H365
16.6.1
16.6
15.7.8 19H364
16.5.1 (c)
16.5.1 (a)
15.7.7 19H357
16.5.1
15.7.6 19H349
16.5 20F66
16.4.1a 20E772520a
15.7.5 19H332
16.4.1 20E252
15.7.4 19H321
16.4 20E247
16.3.1 20D67
16.3 20D47
15.7.3 19H307
16.2 20C65
15.7.2 19H218
16.1.1 20B101
15.7.1 19H117
16.1 20B82
16.0 20A362
15.7 19H12
15.6.1 19G82
15.6 19G71
15.5 19F77
15.4.1 19E258
15.4 19E241
15.3.1 19D52
15.3 19D50
15.2.1 19C63
15.2 19C56
14.8.1 18H107
15.1 19B75
15.1 19B74
15.0.1 19A348
15.0.2 19A404
15.0 19A346
14.8 18H17
14.7.1 18G82
14.7 18G70
14.7 18G69
14.6 18F72
14.5.1 18E212
14.5 18E199
14.2 18B111
14.0.1 18A393
14.4.2 18D70
14.4.1
14.4
14.3
14.2
14.1
14.0
13.7
13.6.1
13.6
13.5.1
13.5
13.4.1
13.4
13.3.1
13.3
13.2.3
13.2.2
13.2
13.1.3
13.1.2
13.1.1
Vulnerabilities (418)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131100 - Exposure of sensitive information to an unauthorized actor CVE-2026-28965 |
CWE-200 | Low | 26.5 23F77 | 12.05.2026 |
SB2026051215 |
||
| #VU131099 - Exposure of sensitive information to an unauthorized actor CVE-2026-28963 |
CWE-200 | Low | 26.5 23F77 | 12.05.2026 |
SB2026051215 |
||
| #VU131098 - Multiple Interpretations of UI Input CVE-2026-28964 |
CWE-450 | Low | 26.5 23F77 | 12.05.2026 |
SB2026051215 SB2026051218 |
||
| #VU131088 - Use After Free CVE-2026-28994 |
CWE-416 | Medium | 18.7.9 22H355, 26.5 23F77 | 12.05.2026 |
SB2026051205 SB2026051209 SB2026051210 and 4 more |
||
| #VU131048 - Use After Free CVE-2026-43668 |
CWE-416 | Medium | 18.7.9 22H355, 26.5 23F77 | 12.05.2026 |
SB2026051205 SB2026051209 SB2026051210 and 5 more |
||
| #VU131047 - Improper input validation CVE-2026-28985 |
CWE-20 | Low | 26.5 23F77 | 12.05.2026 |
SB2026051205 SB2026051215 SB2026051216 |
||
| #VU131046 - Memory corruption CVE-2026-43653 |
CWE-119 | Medium | 18.7.9 22H355, 26.5 23F77 | 12.05.2026 |
SB2026051205 SB2026051210 SB2026051214 and 3 more |
||
| #VU131043 - Improper input validation CVE-2026-28987 |
CWE-20 | Low | 18.7.9 22H355, 26.5 23F77 | 12.05.2026 |
SB2026051205 SB2026051209 SB2026051210 and 4 more |
||
| #VU131044 - Improper Access Control CVE-2026-28983 |
CWE-284 | Low | 18.7.9 22H355, 26.5 23F77 | 12.05.2026 |
SB2026051205 SB2026051214 SB2026051215 and 5 more |
||
| #VU131042 - Improper Access Control CVE-2026-28986 |
CWE-284 | Low | 18.7.9 22H355, 26.5 23F77 | 12.05.2026 |
SB2026051205 SB2026051209 SB2026051210 and 4 more |
||
| #VU131041 - Out-of-bounds write CVE-2026-28972 |
CWE-787 | Low | 18.7.9 22H355, 26.5 23F77 | 12.05.2026 |
SB2026051205 SB2026051209 SB2026051210 and 5 more |
||
| #VU131040 - State Issues CVE-2026-28951 |
CWE-371 | Low | 18.7.9 22H355, 26.5 23F77 | 12.05.2026 |
SB2026051205 SB2026051209 SB2026051210 and 2 more |
||
| #VU131038 - Improper input validation CVE-2026-28897 |
CWE-20 | Low | 18.7.9 22H355, 26.5 23F77 | 12.05.2026 |
SB2026051205 SB2026051209 SB2026051210 and 5 more |
||
| #VU131035 - Memory corruption CVE-2026-43654 |
CWE-119 | Low | 18.7.9 22H355, 26.5 23F77 | 12.05.2026 |
SB2026051205 SB2026051209 SB2026051210 and 5 more |
||
| #VU131034 - Memory corruption CVE-2026-43655 |
CWE-119 | Low | 26.5 23F77 | 12.05.2026 |
SB2026051205 SB2026051215 SB2026051216 and 1 more |
||
| #VU131032 - Improper input validation CVE-2026-28943 |
CWE-20 | Low | 18.7.9 22H355, 26.5 23F77 | 12.05.2026 |
SB2026051205 SB2026051209 SB2026051210 and 4 more |
||
| #VU131033 - Use After Free CVE-2026-28969 |
CWE-416 | Low | 18.7.9 22H355, 26.5 23F77, 27.0 24A437 | 12.05.2026 |
SB2026051205 SB2026051209 SB2026051210 and 9 more |
||
| #VU126887 - Exposure of sensitive information to an unauthorized actor CVE-2026-28950 |
CWE-200 | Low | 26.4.2 23E261, 15.8.8 19H422, 16.7.16 20H392, 17.7.11, 18.7.8 22H352 | 23.04.2026 |
SB2026042332 SB2026042333 SB2026051211 and 2 more |
||
| #VU124405 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-28871 |
CWE-79 | Medium | 18.7.7 22H333, 26.4 23E246 | 25.03.2026 |
SB2026032503 SB2026032504 SB2026032505 and 18 more |
||
| #VU124375 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-20688 |
CWE-22 | Low | 26.4 23E246 | 25.03.2026 |
SB2026032504 SB2026032506 SB2026032507 and 2 more |
Showing elements 281 - 300 out of 418