Known vulnerabilities in iPadOS - page 39

Vendor: Apple Inc.
Software: iPadOS
Software CPE: cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Total vulnerabilities: 1965
Public exploits: 72
Known exploited (KEV): 78
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting iPadOS iPadOS is affected by 1965 known vulnerabilities: 37 critical, 333 high, 326 medium, 1269 low Critical High Medium Low

Vulnerabilities (1965)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103073 - Improper input validation
CVE-2024-54538
CWE-20 Medium
No
No
17.7.1 21H216, 18.1 22B83 20.01.2025 SB2024102847
SB2024102850
SB2024102848
and 5 more
#VU103071 - Memory corruption
CVE-2024-40854
CWE-119 Low
No
No
17.7.1 21H216, 18.1 22B83 20.01.2025 SB2024102847
SB2024102850
SB2024102848
and 2 more
#VU98046 - Permissions, Privileges, and Access Controls
CVE-2024-44204
CWE-264 Low
No
No
18.0.1 22A3370 05.10.2024 SB2024100506
#VU98045 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-44207
CWE-362 Low
No
No
18.0.1 22A3370 05.10.2024 SB2024100506
#VU97411 - Security Features
CVE-2024-44180
CWE-254 Low
No
No
18.0 22A3354 17.09.2024 SB2024091708
#VU97410 - Security Features
CVE-2024-44139
CWE-254 Low
No
No
18.0 22A3354 17.09.2024 SB2024091708
#VU97409 - Exposure of sensitive information to an unauthorized actor
CVE-2024-40863
CWE-200 Low
No
No
18.0 22A3354 17.09.2024 SB2024091708
#VU97408 - Improper Authentication
CVE-2024-44202
CWE-287 Low
No
No
18.0 22A3354 17.09.2024 SB2024091708
SB2024091702
#VU97407 - Permissions, Privileges, and Access Controls
CVE-2024-44147
CWE-264 Low
No
No
18.0 22A3354 17.09.2024 SB2024091708
#VU97406 - Improper Authentication
CVE-2024-44124
CWE-287 Medium
No
No
18.0 22A3354 17.09.2024 SB2024091708
#VU97404 - Improper Authentication
CVE-2024-40852
CWE-287 Low
No
No
18.0 22A3354 17.09.2024 SB2024091708
#VU97403 - Exposure of sensitive information to an unauthorized actor
CVE-2024-40830
CWE-200 Low
No
No
18.0 22A3354 17.09.2024 SB2024091708
#VU97402 - State Issues
CVE-2024-40840
CWE-371 Low
No
No
18.0 22A3354 17.09.2024 SB2024091708
#VU97398 - Insufficient Verification of Data Authenticity
CVE-2024-40856
CWE-345 Medium
No
No
18.0 22A3354 17.09.2024 SB2024091707
SB2024091708
SB2024091709
#VU97391 - Exposure of sensitive information to an unauthorized actor
CVE-2024-44170
CWE-200 Low
No
No
18.0 22A3354 17.09.2024 SB2024091707
SB2024091708
SB2024091710
#VU97389 - Cleartext Storage of Sensitive Information
CVE-2024-40826
CWE-312 Low
No
No
18.0 22A3354 17.09.2024 SB2024091707
SB2024091708
#VU97352 - Permissions, Privileges, and Access Controls
CVE-2024-44167
CWE-264 Low
No
No
18.0 22A3354 17.09.2024 SB2024091703
SB2024091704
SB2024091707
and 2 more
#VU97351 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-40857
CWE-79 Medium
No
No
18.0 22A3354 17.09.2024 SB2024091701
SB2024091702
SB2024091707
and 7 more
#VU97350 - Protection Mechanism Failure
CVE-2024-44187
CWE-693 Low
No
No
18.0 22A3354 17.09.2024 SB2024091701
SB2024091702
SB2024091707
and 32 more
#VU86235 - Heap-based Buffer Overflow
CVE-2023-5841
CWE-122 High
No
No
18.0 22A3354 07.02.2024 SB2024020753
SB2024020756
SB2024021705
and 15 more


Showing elements 761 - 780 out of 1965