Known vulnerabilities in iPadOS 26.2.1 23C71 - page 19

Vendor: Apple Inc.
Software: iPadOS
Version: 26.2.1 23C71
Software CPE: cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Total vulnerabilities: 382
Public exploits: 4
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting iPadOS version 26.2.1 23C71 iPadOS 26.2.1 23C71 is affected by 382 vulnerabilities: 2 critical, 17 high, 81 medium, 282 low Critical High Medium Low

Vulnerabilities (382)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124439 - Improper input validation
CVE-2026-20686
CWE-20 Low
No
No
26.3 23D127 25.03.2026 SB2026021194
#VU124409 - Information Exposure Through Log Files
CVE-2026-20668
CWE-532 Low
No
No
18.7.7 22H333, 26.3 23D127 25.03.2026 SB2026032506
SB2026032507
SB2026032509
and 3 more
#VU124407 - Use After Free
CVE-2026-20637
CWE-416 Low
No
No
18.7.7 22H333, 26.3 23D127 25.03.2026 SB2026032506
SB2026032507
SB2026032509
and 5 more
#VU122736 - Information Exposure Through Log Files
CVE-2026-20663
CWE-532 Low
No
No
26.3 23D127, 18.7.5 22H311 11.02.2026 SB2026021194
SB2026021195
#VU122729 - State Issues
CVE-2026-20655
CWE-371 Low
No
No
26.3 23D127, 18.7.5 22H311 11.02.2026 SB2026021194
SB2026021195
#VU122710 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2026-20671
CWE-300 Medium
No
No
18.7.5 22H311, 26.3 23D127 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 5 more
#VU122708 - Exposure of sensitive information to an unauthorized actor
CVE-2026-20649
CWE-200 Low
No
No
26.3 23D127 11.02.2026 SB2026021188
SB2026021192
SB2026021193
and 1 more
#VU122706 - Memory corruption
CVE-2026-20700
CWE-119 High
No
Exploited
26.3 23D127 11.02.2026 SB2026021188
SB2026021191
SB2026021192
and 2 more
#VU122687 - Improper Access Control
CVE-2026-20667
CWE-284 Low
No
No
26.3 23D127 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 2 more
#VU122685 - Improper Access Control
CVE-2026-20626
CWE-284 Low
No
No
26.3 23D127 11.02.2026 SB2026021188
SB2026021189
SB2026021191
and 1 more
#VU122684 - Memory corruption
CVE-2026-20654
CWE-119 Low
No
No
26.3 23D127 11.02.2026 SB2026021188
SB2026021191
SB2026021192
and 2 more
#VU122683 - Out-of-bounds read
CVE-2026-20634
CWE-125 Medium
No
No
18.7.5 22H311, 26.3 23D127 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 5 more
#VU122682 - Integer overflow
CVE-2026-20675
CWE-190 High
No
No
18.7.5 22H311, 26.3 23D127 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 5 more
#VU122679 - Improper input validation
CVE-2026-20627
CWE-20 Low
No
No
26.3 23D127 11.02.2026 SB2026021188
SB2026021190
SB2026021191
and 2 more
#VU122678 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-20615
CWE-22 Low
No
No
26.3 23D127 11.02.2026 SB2026021188
SB2026021190
SB2026021191
and 1 more
#VU122677 - State Issues
CVE-2026-20617
CWE-371 Low
No
No
26.3 23D127 11.02.2026 SB2026021188
SB2026021190
SB2026021191
and 3 more
#VU122676 - Memory corruption
CVE-2026-20609
CWE-119 Medium
No
No
18.7.5 22H311, 26.3 23D127 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 5 more
#VU122675 - Out-of-bounds write
CVE-2026-20611
CWE-787 High
No
No
18.7.5 22H311, 26.3 23D127 11.02.2026 SB2026021188
SB2026021189
SB2026021190
and 5 more
#VU119902 - Use After Free
CVE-2025-43529
CWE-416 Critical
Public exploit available
Exploited
18.7.3 22H217, 26.2 23C55, 26.3 23D127 13.12.2025 SB2025121301
SB2025121303
SB2025121304
and 29 more
#VU115751 - Resource exhaustion
CVE-2025-59375
CWE-400 Medium
No
No
18.7.5 22H311, 26.3 23D127 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 109 more


Showing elements 361 - 380 out of 382