CVE Intelligence

Apple iOS and iPadOS vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apple iOS and iPadOS: 644 record(s), with affected versions and fixes.

CVE-2026-86950 High · 8.8 KEV High · 57 Public exploit CWE-787 Sep 28, 2026
Apple Multiple Products Out-of-Bounds Write Vulnerability
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.
CVE-2026-86924 Medium · 5.5 CWE-20 Sep 14, 2026
Improper Input Validation in Apple Ipados
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination.
CVE-2026-86905 Medium · 5.5 CWE-284 Sep 14, 2026
Improper Access Control in Apple Ipados
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain.
CVE-2026-86904 High · 7.5 CWE-359 Sep 14, 2026
A privacy issue was addressed with improved state management. This issue is fixed in iOS…
A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permission.
CVE-2026-86903 Medium · 5.5 CWE-125 Sep 14, 2026
Out-of-bounds Read in Apple Ipados
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.
CVE-2026-86898 Medium · 5.4 CWE-79 Sep 14, 2026
Cross-site Scripting (XSS) in Apple Safari
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.
CVE-2026-86897 Medium · 5.5 CWE-862 Sep 14, 2026
Missing Authorization in Apple Safari
This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data.
CVE-2026-86895 High · 7.5 CWE-200 Sep 14, 2026
Exposure of Sensitive Information in Apple Ipados
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.
CVE-2026-86893 Low · 3.3 CWE-269 Sep 14, 2026
Improper Privilege Management in Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name.
CVE-2026-86892 Medium · 5.5 CWE-770 Sep 14, 2026
Allocation of Resources Without Limits or Throttling in Apple Ipados
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to cause a denial-of-service.
CVE-2026-86890 Medium · 4.6 CWE-287 Sep 14, 2026
Improper Authentication in Apple Ipados
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information.
CVE-2026-86888 Low · 3.3 CWE-269 Sep 14, 2026
Improper Privilege Management in Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.
CVE-2026-86887 Low · 3.3 CWE-200 Sep 14, 2026
Exposure of Sensitive Information in Apple Ipados
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences.
CVE-2026-86886 Medium · 5.5 CWE-22 Sep 14, 2026
Path Traversal in Apple Ipados
A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files.
CVE-2026-86885 Medium · 6.5 CWE-20 Sep 14, 2026
Improper Input Validation in Apple Ipados
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination.
CVE-2026-86884 Medium · 5.5 CWE-269 Sep 14, 2026
Improper Privilege Management in Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able to access sensitive user data.
CVE-2026-86883 Medium · 5.5 CWE-200 Sep 14, 2026
Exposure of Sensitive Information in Apple Ipados
A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data.
CVE-2026-86882 Medium · 6.5 CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.
CVE-2026-86881 Critical · 9.1 CWE-295 Sep 14, 2026
Improper Certificate Validation in Apple Ipados
A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages.
CVE-2026-86879 Medium · 6.5 CWE-20 Sep 14, 2026
Improper Input Validation in Apple Ipados
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A remote attacker may be able to cause a denial-of-service.
CVE-2026-86878 Medium · 5.5 CWE-200 Sep 14, 2026
Exposure of Sensitive Information in Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.
CVE-2026-86876 Medium · 5.2 CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2026-86870 Medium · 6.5 CWE-122 Sep 14, 2026
Heap-based Buffer Overflow in Apple Ipados
A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-86869 Medium · 6.5 CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27. Processing a maliciously crafted image may lead to unexpected app termination.
CVE-2026-84636 Medium · 5.5 CWE-285 Sep 14, 2026
Improper Authorization in Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.