Known vulnerabilities in iPadOS - page 23
Vendor:
Apple Inc.
Software:
iPadOS
Software CPE:
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Website:
https://apple.com
Total vulnerabilities:
2096
Public exploits:
74
Known exploited (KEV):
79
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
26.7.1 23H30
27.0 24A437
26.7 23H24
26.6.2 23G90
18.7.10 22H374
26.6.1 23G83
26.6 23G71
26.5.2 23F84
26.5 23F77
18.7.9 22H355
17.7.11
16.7.16 20H392
15.8.8 19H422
18.7.8 22H352
18.7.7 22H340
26.4.2 23E261
26.4.1 23E254
26.4 23E246
18.7.7 22H333
18.7.6 22H320
26.3.1 (a) 23D771330a
26.3.1 23D8133
15.8.7 19H411
15.8.6 19H402
16.7.15 20H380
16.7.14 20H370
16.7.13 20H365
18.7.5 22H311
18.7.4 22H218
26.3 23D127
26.2.1 23C71
18.7.3 22H217
26.2 23C55
18.7.2 22H124
26.1 23B85
18.7.1 22H31
26.0.1 23A355
16.7.12 20H364
15.8.5 19H394
26.0 23A341
26.0 23A330
18.7 22H20
17.7.10
18.6.2 22G100
18.6.1 22G90
17.7.9
17.7.8
18.6 22G86
17.7.7
18.5 22F76
18.4.1 22E252
18.4 22E240
17.7.6
15.8.4 19H390
15.8.3 19H386
15.8.2 19H384
16.7.11
16.7.10
18.3.2 22D82
17.7.5
18.3.1 22D72
17.7.4
18.3 22D60
18.2 22C152
17.7.3
18.1.1 22B83
17.7.2 21H216
18.1 22B83
17.7.1 21H216
18.0.1 22A3370
18.0 22A3354
17.7 21H16
17.6.1 21G93
16.7.9 20H348
17.6 21G80
17.5.1 21F90
17.5 21F79
16.7.8
17.4.1 21E236
16.7.7
17.4 21E217
17.3.1 21D61
16.7.6
15.8.1 19H380
17.3 21D50
17.2.1 21C66
16.7.5
16.7.4
17.2 21C62
16.7.3
17.1.2
17.1
16.7.2
15.8 19H370
16.7.1
17.0.3
17.0.2
17.0.1
17.0
16.7
15.7.9 19H365
16.6.1
16.6
15.7.8 19H364
16.5.1 (c)
16.5.1 (a)
15.7.7 19H357
16.5.1
15.7.6 19H349
16.5 20F66
16.4.1a 20E772520a
15.7.5 19H332
16.4.1 20E252
15.7.4 19H321
16.4 20E247
16.3.1 20D67
16.3 20D47
15.7.3 19H307
16.2 20C65
15.7.2 19H218
16.1.1 20B101
15.7.1 19H117
16.1 20B82
16.0 20A362
15.7 19H12
15.6.1 19G82
15.6 19G71
15.5 19F77
15.4.1 19E258
15.4 19E241
15.3.1 19D52
15.3 19D50
15.2.1 19C63
15.2 19C56
14.8.1 18H107
15.1 19B75
15.1 19B74
15.0.1 19A348
15.0.2 19A404
15.0 19A346
14.8 18H17
14.7.1 18G82
14.7 18G70
14.7 18G69
14.6 18F72
14.5.1 18E212
14.5 18E199
14.2 18B111
14.0.1 18A393
14.4.2 18D70
14.4.1
14.4
14.3
14.2
14.1
14.0
13.7
13.6.1
13.6
13.5.1
13.5
13.4.1
13.4
13.3.1
13.3
13.2.3
13.2.2
13.2
13.1.3
13.1.2
13.1.1
Vulnerabilities (2096)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU122738 - Improper input validation CVE-2025-43537 |
CWE-20 | Medium | 18.7.5 22H311, 26.2 23C55 | 11.02.2026 |
SB2026021195 SB2025121309 |
||
| #VU122735 - Exposure of sensitive information to an unauthorized actor CVE-2026-20638 |
CWE-200 | Low | 26.3 23D127 | 11.02.2026 |
SB2026021194 |
||
| #VU122734 - Exposure of sensitive information to an unauthorized actor CVE-2026-20674 |
CWE-200 | Low | 26.3 23D127 | 11.02.2026 |
SB2026021194 |
||
| #VU122732 - State Issues CVE-2026-20640 |
CWE-371 | Low | 26.3 23D127 | 11.02.2026 |
SB2026021194 |
||
| #VU122730 - Improper input validation CVE-2026-20642 |
CWE-20 | Low | 26.3 23D127 | 11.02.2026 |
SB2026021194 |
||
| #VU122720 - Memory corruption CVE-2025-46300 |
CWE-119 | Low | 18.7.5 22H311, 26.2 23C55 | 11.02.2026 |
SB2026021189 SB2026021190 SB2026021195 and 5 more |
||
| #VU122721 - Memory corruption CVE-2025-46301 |
CWE-119 | Low | 18.7.5 22H311, 26.2 23C55 | 11.02.2026 |
SB2026021189 SB2026021190 SB2026021195 and 5 more |
||
| #VU122722 - Memory corruption CVE-2025-46302 |
CWE-119 | Low | 18.7.5 22H311, 26.2 23C55 | 11.02.2026 |
SB2026021189 SB2026021190 SB2026021195 and 5 more |
||
| #VU122723 - Memory corruption CVE-2025-46303 |
CWE-119 | Low | 18.7.5 22H311, 26.2 23C55 | 11.02.2026 |
SB2026021189 SB2026021190 SB2026021195 and 5 more |
||
| #VU122724 - Memory corruption CVE-2025-46304 |
CWE-119 | Low | 18.7.5 22H311, 26.2 23C55 | 11.02.2026 |
SB2026021189 SB2026021190 SB2026021195 and 5 more |
||
| #VU122712 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-20677 |
CWE-362 | Low | 18.7.5 22H311, 26.3 23D127 | 11.02.2026 |
SB2026021188 SB2026021190 SB2026021191 and 2 more |
||
| #VU122711 - Protection Mechanism Failure CVE-2026-20673 |
CWE-693 | Medium | 18.7.5 22H311 | 11.02.2026 |
SB2026021188 SB2026021189 SB2026021190 and 1 more |
||
| #VU122705 - Improper input validation CVE-2026-20650 |
CWE-20 | Low | 26.3 23D127 | 11.02.2026 |
SB2026021188 SB2026021191 SB2026021192 and 2 more |
||
| #VU122688 - Out-of-bounds write CVE-2026-20616 |
CWE-787 | High | 18.7.5 22H311 | 11.02.2026 |
SB2026021188 SB2026021190 SB2026021191 and 1 more |
||
| #VU122678 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-20615 |
CWE-22 | Low | 26.3 23D127 | 11.02.2026 |
SB2026021188 SB2026021190 SB2026021191 and 1 more |
||
| #VU122677 - State Issues CVE-2026-20617 |
CWE-371 | Low | 26.3 23D127 | 11.02.2026 |
SB2026021188 SB2026021190 SB2026021191 and 3 more |
||
| #VU122674 - State Issues CVE-2026-20676 |
CWE-371 | Medium | 26.3 23D127 | 11.02.2026 |
SB2026021187 SB2026021188 SB2026021191 and 23 more |
||
| #VU122671 - Memory corruption CVE-2026-20636 |
CWE-119 | Low | 26.3 23D127 | 11.02.2026 |
SB2026021187 SB2026021188 SB2026021191 and 23 more |
||
| #VU119940 - Memory corruption CVE-2025-43533 |
CWE-119 | Low | 18.7.5 22H311, 26.2 23C55 | 13.12.2025 |
SB2025121304 SB2025121305 SB2025121306 and 5 more |
||
| #VU119833 - Out-of-bounds write CVE-2025-14174 |
CWE-787 | Critical | 18.7.3 22H217, 26.2 23C55, 26.3 23D127 | 11.12.2025 |
SB2025121118 SB2025121301 SB2025121303 and 21 more |
Showing elements 441 - 460 out of 2096