Known vulnerabilities in iPadOS - page 14
Vendor:
Apple Inc.
Software:
iPadOS
Software CPE:
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Website:
https://apple.com
Total vulnerabilities:
1965
Public exploits:
72
Known exploited (KEV):
78
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
18.7.10 22H374
26.6.1 23G83
26.6 23G71
26.5.2 23F84
26.5 23F77
18.7.9 22H355
17.7.11
16.7.16 20H392
15.8.8 19H422
18.7.8 22H352
18.7.7 22H340
26.4.2 23E261
26.4.1 23E254
26.4 23E246
18.7.7 22H333
18.7.6 22H320
26.3.1 (a) 23D771330a
26.3.1 23D8133
15.8.7 19H411
15.8.6 19H402
16.7.15 20H380
16.7.14 20H370
16.7.13 20H365
18.7.5 22H311
18.7.4 22H218
26.3 23D127
26.2.1 23C71
18.7.3 22H217
26.2 23C55
18.7.2 22H124
26.1 23B85
18.7.1 22H31
26.0.1 23A355
16.7.12 20H364
15.8.5 19H394
26.0 23A341
26.0 23A330
18.7 22H20
17.7.10
18.6.2 22G100
18.6.1 22G90
17.7.9
17.7.8
18.6 22G86
17.7.7
18.5 22F76
18.4.1 22E252
18.4 22E240
17.7.6
15.8.4 19H390
15.8.3 19H386
15.8.2 19H384
16.7.11
16.7.10
18.3.2 22D82
17.7.5
18.3.1 22D72
17.7.4
18.3 22D60
18.2 22C152
17.7.3
18.1.1 22B83
17.7.2 21H216
18.1 22B83
17.7.1 21H216
18.0.1 22A3370
18.0 22A3354
17.7 21H16
17.6.1 21G93
16.7.9 20H348
17.6 21G80
17.5.1 21F90
17.5 21F79
16.7.8
17.4.1 21E236
16.7.7
17.4 21E217
17.3.1 21D61
16.7.6
15.8.1 19H380
17.3 21D50
17.2.1 21C66
16.7.5
16.7.4
17.2 21C62
16.7.3
17.1.2
17.1
16.7.2
15.8 19H370
16.7.1
17.0.3
17.0.2
17.0.1
17.0
16.7
15.7.9 19H365
16.6.1
16.6
15.7.8 19H364
16.5.1 (c)
16.5.1 (a)
15.7.7 19H357
16.5.1
15.7.6 19H349
16.5 20F66
16.4.1a 20E772520a
15.7.5 19H332
16.4.1 20E252
15.7.4 19H321
16.4 20E247
16.3.1 20D67
16.3 20D47
15.7.3 19H307
16.2 20C65
15.7.2 19H218
16.1.1 20B101
15.7.1 19H117
16.1 20B82
16.0 20A362
15.7 19H12
15.6.1 19G82
15.6 19G71
15.5 19F77
15.4.1 19E258
15.4 19E241
15.3.1 19D52
15.3 19D50
15.2.1 19C63
15.2 19C56
14.8.1 18H107
15.1 19B75
15.1 19B74
15.0.1 19A348
15.0.2 19A404
15.0 19A346
14.8 18H17
14.7.1 18G82
14.7 18G70
14.7 18G69
14.6 18F72
14.5.1 18E212
14.5 18E199
14.2 18B111
14.0.1 18A393
14.4.2 18D70
14.4.1
14.4
14.3
14.2
14.1
14.0
13.7
13.6.1
13.6
13.5.1
13.5
13.4.1
13.4
13.3.1
13.3
13.2.3
13.2.2
13.2
13.1.3
13.1.2
13.1.1
Vulnerabilities (1965)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU124414 - Protection Mechanism Failure CVE-2025-43534 |
CWE-693 | Low | 18.7.7 22H333, 26.2 23C55 | 25.03.2026 |
SB2026032509 SB2025121309 |
||
| #VU124409 - Information Exposure Through Log Files CVE-2026-20668 |
CWE-532 | Low | 18.7.7 22H333, 26.3 23D127 | 25.03.2026 |
SB2026032506 SB2026032507 SB2026032509 and 3 more |
||
| #VU124407 - Use After Free CVE-2026-20637 |
CWE-416 | Low | 18.7.7 22H333, 26.3 23D127 | 25.03.2026 |
SB2026032506 SB2026032507 SB2026032509 and 5 more |
||
| #VU124403 - Permissions, Privileges, and Access Controls CVE-2026-28880 |
CWE-264 | Low | 18.7.7 22H333, 26.4 23E246 | 25.03.2026 |
SB2026032504 SB2026032506 SB2026032507 and 3 more |
||
| #VU124398 - Exposure of sensitive information to an unauthorized actor CVE-2026-28864 |
CWE-200 | Low | 18.7.7 22H333, 26.4 23E246 | 25.03.2026 |
SB2026032504 SB2026032506 SB2026032507 and 4 more |
||
| #VU124390 - Improper Access Control CVE-2026-28867 |
CWE-284 | Low | 18.7.7 22H333, 26.4 23E246 | 25.03.2026 |
SB2026032504 SB2026032506 SB2026032509 and 4 more |
||
| #VU124383 - Improper input validation CVE-2026-28852 |
CWE-20 | Low | 18.7.7 22H333, 26.4 23E246 | 25.03.2026 |
SB2026032504 SB2026032506 SB2026032509 and 4 more |
||
| #VU124360 - Information Exposure Through Log Files CVE-2026-28868 |
CWE-532 | Low | 18.7.7 22H333, 26.4 23E246 | 25.03.2026 |
SB2026032504 SB2026032506 SB2026032507 and 4 more |
||
| #VU124355 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-28876 |
CWE-22 | Low | 18.7.7 22H333, 26.4 23E246 | 25.03.2026 |
SB2026032504 SB2026032506 SB2026032507 and 3 more |
||
| #VU124352 - Improper input validation CVE-2026-28886 |
CWE-20 | Low | 18.7.7 22H333, 26.4 23E246 | 25.03.2026 |
SB2026032504 SB2026032506 SB2026032507 and 5 more |
||
| #VU124349 - Memory corruption CVE-2026-20690 |
CWE-119 | Low | 18.7.7 22H333, 26.4 23E246 | 25.03.2026 |
SB2026032504 SB2026032506 SB2026032507 and 5 more |
||
| #VU124348 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-28866 |
CWE-59 | Low | 18.7.7 22H333, 26.4 23E246 | 25.03.2026 |
SB2026032504 SB2026032506 SB2026032507 and 2 more |
||
| #VU124346 - Use After Free CVE-2026-28879 |
CWE-416 | Medium | 18.7.7 22H333, 26.4 23E246 | 25.03.2026 |
SB2026032504 SB2026032506 SB2026032507 and 5 more |
||
| #VU124342 - Improper input validation CVE-2026-28878 |
CWE-20 | Low | 18.7.7 22H333, 26.4 23E246 | 25.03.2026 |
SB2026032504 SB2026032507 SB2026032509 and 5 more |
||
| #VU124335 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2026-28865 |
CWE-300 | Medium | 18.7.7 22H333, 26.4 23E246 | 25.03.2026 |
SB2026032504 SB2026032506 SB2026032507 and 5 more |
||
| #VU124085 - Protection Mechanism Failure CVE-2026-20643 |
CWE-693 | Medium | 18.7.7 22H333, 26.3.1 (a) 23D771330a, 26.4 23E246 | 17.03.2026 |
SB2026031771 SB2026031772 SB2026031773 and 22 more |
||
| #VU123953 - Memory corruption CVE-2023-43010 |
CWE-119 | High | 15.8.7 19H411, 16.7.15 20H380 | 12.03.2026 |
SB2026031235 SB2026031236 SB2026031237 and 3 more |
||
| #VU121026 - Insufficiently Protected Credentials CVE-2025-14524 |
CWE-522 | Low | 18.7.7 22H333, 26.4 23E246 | 07.01.2026 |
SB2026010741 SB2026010781 SB2026010782 and 23 more |
||
| #VU118780 - Out-of-bounds read CVE-2025-64505 |
CWE-125 | Medium | 18.7.7 22H333, 26.4 23E246 | 26.11.2025 |
SB2025112638 SB2025112639 SB2025112819 and 22 more |
||
| #VU118652 - Use After Free CVE-2023-43000 |
CWE-416 | High | 15.8.7 19H411 | 20.11.2025 |
SB2025051619 SB2025120801 SB2025120802 and 4 more |
Showing elements 261 - 280 out of 1965