Recently modified medium severity vulnerabilities for "apple ipados"

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.

1 / 32

Source: NVD

First published (updated )

CVE-2025-5918

Apple iPadOSInput Validation, Race Condition, Integer Overflow

Risk 33

Severity

5.7

Input Validation, Race Condition, Integer Overflow

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. An inconsistent user interface issue was addressed with improved state management.

1 / 62

Source: Apple

First published (updated )

CVE-2025-43533

Apple WatchOSUse After Free, Race Condition, Input Validation, Integer Overflow

Risk 31

Severity

5.5

Use After Free, Race Condition, Input Validation, Integer Overflow

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 22

Source: Apple

First published (updated )

CVE-2026-20627

Apple visionOSUse After Free, Race Condition, Input Validation, Integer Overflow

Risk 31

Severity

5.5

Use After Free, Race Condition, Input Validation, Integer Overflow

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 35

Source: Apple

First published (updated )

CVE-2026-20634

Apple visionOSBuffer Overflow, Use After Free, Race Condition, Input Validation, Integer Overflow

Risk 32

Severity

5.5

Buffer Overflow, Use After Free, Race Condition, Input Validation, Integer Overflow

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 29

Source: Apple

First published (updated )

CVE-2026-20654

Apple visionOSPath Traversal, Use After Free, Input Validation, Race Condition, Integer Overflow

Risk 31

Severity

5.5

Path Traversal, Use After Free, Input Validation, Race Condition, Integer Overflow

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. An app may be able to access sensitive user data.

1 / 67

Source: MITRE

First published (updated )

CVE-2026-20653

Apple visionOSUse After Free, Input Validation, Race Condition, Integer Overflow

Risk 29

Severity

5.3

Use After Free, Input Validation, Race Condition, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 72

Source: Apple

First published (updated )

CVE-2026-20676

Apple visionOSBuffer Overflow, Use After Free, Input Validation, Race Condition, Integer Overflow

Risk 32

Severity

5.5

Buffer Overflow, Use After Free, Input Validation, Race Condition, Integer Overflow

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 86

Source: Apple

First published (updated )

CVE-2026-20621

Apple visionOSUse After Free, Input Validation, Integer Overflow

Risk 28

Severity

4.4

Use After Free, Input Validation, Integer Overflow

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 19

Source: Apple

First published (updated )

CVE-2026-20609

Apple macOS SequoiaBuffer Overflow, Race Condition, Input Validation, Integer Overflow, Use After Free

Risk 27

Severity

4.6

Buffer Overflow, Race Condition, Input Validation, Integer Overflow, Use After Free

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accessibility. An inconsistent user interface issue was addressed with improved state management.

1 / 76

Source: Apple

First published (updated )

CVE-2026-20605

Apple macOS SequoiaRace Condition, Input Validation, Integer Overflow, Use After Free

Risk 27

Severity

5.3

Race Condition, Input Validation, Integer Overflow, Use After Free

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. Turning off "Load remote content in messages” may not apply to all mail previews.

1 / 44

Source: MITRE

First published (updated )

CVE-2026-20673

Apple macOS SequoiaInput Validation, Race Condition, Buffer Overflow, Integer Overflow

Risk 33

Severity

5.7

Input Validation, Race Condition, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. An inconsistent user interface issue was addressed with improved state management.

1 / 62

Source: Apple

First published (updated )

CVE-2025-46300

Apple macOS SequoiaInput Validation, Race Condition, Buffer Overflow, Integer Overflow

Risk 33

Severity

5.7

Input Validation, Race Condition, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. An inconsistent user interface issue was addressed with improved state management.

1 / 62

Source: Apple

First published (updated )

CVE-2025-46301

Apple macOS SequoiaInput Validation, Race Condition, Buffer Overflow, Integer Overflow

Risk 33

Severity

5.7

Input Validation, Race Condition, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. An inconsistent user interface issue was addressed with improved state management.

1 / 62

Source: Apple

First published (updated )

CVE-2025-46303

Apple macOS SequoiaInput Validation, Race Condition, Buffer Overflow, Integer Overflow

Risk 33

Severity

5.7

Input Validation, Race Condition, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. An inconsistent user interface issue was addressed with improved state management.

1 / 62

Source: Apple

First published (updated )

CVE-2025-46302

Apple macOS SequoiaInput Validation, Race Condition, Integer Overflow

Risk 33

Severity

5.7

Input Validation, Race Condition, Integer Overflow

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. An inconsistent user interface issue was addressed with improved state management.

1 / 62

Source: Apple

First published (updated )

CVE-2025-46304

Apple macOS SequoiaInput Validation, Race Condition, Buffer Overflow, Integer Overflow

Risk 33

Severity

5.7

Input Validation, Race Condition, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. An inconsistent user interface issue was addressed with improved state management.

1 / 62

Source: Apple

First published (updated )

CVE-2025-46305

Apple macOS SequoiaInfoleak, Use After Free, Input Validation, Race Condition, Integer Overflow

Risk 36

Severity

6.5

Infoleak, Use After Free, Input Validation, Race Condition, Integer Overflow

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 73

Source: Apple

First published (updated )

CVE-2026-20680

Apple iOSUse After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Race Condition

Risk 31

Severity

5.5

Use After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Race Condition

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

802.1X. An authentication issue was addressed with improved state management.

1 / 43

Source: Apple

First published (updated )

CVE-2026-20668

Apple iOSUse After Free

Risk 36

Severity

6.2

Use After Free

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

802.1X. An authentication issue was addressed with improved state management.

1 / 9

Source: Apple

First published (updated )

CVE-2026-20637

Apple macOS TahoeUse After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow, Integer Overflow

Risk 32

Severity

5.5

Use After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

802.1X. An authentication issue was addressed with improved state management.

1 / 94

Source: Apple

First published (updated )

CVE-2026-20694

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Double Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. This issue was addressed through improved state management.

1 / 103

Source: Apple

First published (updated )

CVE-2026-43745

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Double Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management.

Impact: maliciously crafted web content may cause unexpected process crash

Advisory: https://webkitgtk.org/security/WSA-2026-0004.html WebKit Bug: https://bugs.webkit.org/showbug.cgi?id=315161

1 / 95

Source: Red Hat

First published (updated )

Risk 37

Severity

6.5

Double Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accounts Framework. This issue was addressed with improved data protection.

1 / 85

Source: Apple

First published (updated )

CVE-2026-43721

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Double Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management.

Impact: maliciously crafted web content may cause unexpected Safari crash

Advisory: https://webkitgtk.org/security/WSA-2026-0004.html WebKit Bug: https://bugs.webkit.org/showbug.cgi?id=313175

1 / 104

Source: Red Hat

First published (updated )

CVE-2026-43720

Trending

Versions

Libarchive libarchiveLibarchive: reading past eof may be triggered for piped file streams

Apple iPadOSInput Validation, Race Condition, Integer Overflow

Apple WatchOSUse After Free, Race Condition, Input Validation, Integer Overflow

Apple visionOSUse After Free, Race Condition, Input Validation, Integer Overflow

Apple visionOSBuffer Overflow, Use After Free, Race Condition, Input Validation, Integer Overflow

Apple visionOSPath Traversal, Use After Free, Input Validation, Race Condition, Integer Overflow

Apple visionOSUse After Free, Input Validation, Race Condition, Integer Overflow

Apple visionOSBuffer Overflow, Use After Free, Input Validation, Race Condition, Integer Overflow

Apple visionOSUse After Free, Input Validation, Integer Overflow

Apple macOS SequoiaBuffer Overflow, Race Condition, Input Validation, Integer Overflow, Use After Free

Apple macOS SequoiaRace Condition, Input Validation, Integer Overflow, Use After Free

Apple macOS SequoiaInput Validation, Race Condition, Buffer Overflow, Integer Overflow

Apple macOS SequoiaInput Validation, Race Condition, Buffer Overflow, Integer Overflow

Apple macOS SequoiaInput Validation, Race Condition, Buffer Overflow, Integer Overflow

Apple macOS SequoiaInput Validation, Race Condition, Buffer Overflow, Integer Overflow

Apple macOS SequoiaInput Validation, Race Condition, Integer Overflow

Apple macOS SequoiaInput Validation, Race Condition, Buffer Overflow, Integer Overflow

Apple macOS SequoiaInfoleak, Use After Free, Input Validation, Race Condition, Integer Overflow

Apple iOSUse After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Race Condition

Apple iOSUse After Free

Apple macOS TahoeUse After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow, Integer Overflow

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Apple iOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Apple iOSDouble Free, Use After Free, Input Validation, Race Condition, Path Traversal, Buffer Overflow, Integer Overflow

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Apple iOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Company

Resources

Contact