{"schema_version":1,"title":"Apple iPadOS vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 501 vulnerabilities in Apple iPadOS: 0 in the last 7 days and 294 in the last 90 days, 82 of them critical and 74 exploited in the wild. The most recent, CVE-2026-86924, was published on 14 September 2026.","url":"https://junglewise.ai/threats/technologies/ipados","json_url":"https://junglewise.ai/threats/technologies/ipados.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/ipados","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":93,"all_time":501,"critical":82,"exploited":74,"last_7_days":0,"last_30_days":139,"last_90_days":294,"last_365_days":427},"latest":[{"cve":"CVE-2026-86924","cvss":5.5,"epss":0.0016,"slug":"cve-2026-86924-apple-ios-and-ipados-memory-corruption-via-malicious-accessory","title":"Apple iOS and iPadOS memory corruption via malicious accessory","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.863+00:00","url":"https://junglewise.ai/threats/cve-2026-86924-apple-ios-and-ipados-memory-corruption-via-malicious-accessory"},{"cve":"CVE-2026-86905","cvss":5.5,"epss":0.0014,"slug":"cve-2026-86905-apple-keychain-unauthorized-credential-deletion-vulnerability","title":"Apple Keychain unauthorized credential deletion vulnerability","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.353+00:00","url":"https://junglewise.ai/threats/cve-2026-86905-apple-keychain-unauthorized-credential-deletion-vulnerability"},{"cve":"CVE-2026-86904","cvss":7.5,"epss":0.0043,"slug":"cve-2026-86904-apple-ios-ipados-watchos-cross-app-tracking-privacy-issue","title":"Apple iOS iPadOS watchOS cross-app tracking privacy issue","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:41.247+00:00","url":"https://junglewise.ai/threats/cve-2026-86904-apple-ios-ipados-watchos-cross-app-tracking-privacy-issue"},{"cve":"CVE-2026-86903","cvss":5.5,"epss":0.0016,"slug":"cve-2026-86903-apple-ios-out-of-bounds-read-in-kernel-memory","title":"Apple iOS out-of-bounds read in kernel memory","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:41.14+00:00","url":"https://junglewise.ai/threats/cve-2026-86903-apple-ios-out-of-bounds-read-in-kernel-memory"},{"cve":"CVE-2026-86898","cvss":5.4,"epss":0.0025,"slug":"cve-2026-86898-apple-safari-universal-cross-site-scripting-in-webarchive","title":"Apple Safari universal cross-site scripting in webarchive handling","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:40.71+00:00","url":"https://junglewise.ai/threats/cve-2026-86898-apple-safari-universal-cross-site-scripting-in-webarchive"},{"cve":"CVE-2026-86897","cvss":5.5,"epss":0.0016,"slug":"cve-2026-86897-apple-accessibility-entitlement-check-bypass-in-ios-and-macos","title":"Apple Accessibility entitlement check bypass in iOS and macOS","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:40.587+00:00","url":"https://junglewise.ai/threats/cve-2026-86897-apple-accessibility-entitlement-check-bypass-in-ios-and-macos"},{"cve":"CVE-2026-86895","cvss":7.5,"epss":0.0047,"slug":"cve-2026-86895-apple-cloudkit-information-disclosure-in-persistent-account","title":"Apple CloudKit information disclosure in persistent account identifiers","severity":"high","exploited":false,"published_at":"2026-09-14T21:17:40.473+00:00","url":"https://junglewise.ai/threats/cve-2026-86895-apple-cloudkit-information-disclosure-in-persistent-account"},{"cve":"CVE-2026-86893","cvss":3.3,"epss":0.0014,"slug":"cve-2026-86893-apple-ios-ipados-tvos-visionos-watchos-permissions-issue-in","title":"Apple iOS/iPadOS/tvOS/visionOS/watchOS permissions issue in CloudKit","severity":"low","exploited":false,"published_at":"2026-09-14T21:17:40.263+00:00","url":"https://junglewise.ai/threats/cve-2026-86893-apple-ios-ipados-tvos-visionos-watchos-permissions-issue-in"},{"cve":"CVE-2026-86892","cvss":5.5,"epss":0.0015,"slug":"cve-2026-86892-apple-ios-entitlement-validation-denial-of-service","title":"Apple iOS entitlement validation denial of service","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:40.16+00:00","url":"https://junglewise.ai/threats/cve-2026-86892-apple-ios-entitlement-validation-denial-of-service"},{"cve":"CVE-2026-86890","cvss":4.6,"epss":0.0021,"slug":"cve-2026-86890-apple-ios-and-ipados-logic-issue-in-locked-device-access","title":"Apple iOS and iPadOS logic issue in locked device access","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.963+00:00","url":"https://junglewise.ai/threats/cve-2026-86890-apple-ios-and-ipados-logic-issue-in-locked-device-access"},{"cve":"CVE-2026-86888","cvss":3.3,"epss":0.0014,"slug":"cve-2026-86888-apple-app-store-permissions-issue-allowing-persistent-account","title":"Apple App Store permissions issue allowing persistent account identifier exposure","severity":"low","exploited":false,"published_at":"2026-09-14T21:17:39.757+00:00","url":"https://junglewise.ai/threats/cve-2026-86888-apple-app-store-permissions-issue-allowing-persistent-account"},{"cve":"CVE-2026-86887","cvss":3.3,"epss":0.0016,"slug":"cve-2026-86887-apple-ios-privacy-issue-allowing-app-bypass-of-user-preferences","title":"Apple iOS privacy issue allowing app bypass of user preferences","severity":"low","exploited":false,"published_at":"2026-09-14T21:17:39.66+00:00","url":"https://junglewise.ai/threats/cve-2026-86887-apple-ios-privacy-issue-allowing-app-bypass-of-user-preferences"},{"cve":"CVE-2026-86886","cvss":5.5,"epss":0.0017,"slug":"cve-2026-86886-apple-ios-path-traversal-in-system-file-access","title":"Apple iOS path traversal in system file access","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.553+00:00","url":"https://junglewise.ai/threats/cve-2026-86886-apple-ios-path-traversal-in-system-file-access"},{"cve":"CVE-2026-86885","cvss":6.5,"epss":0.0025,"slug":"cve-2026-86885-apple-ios-input-validation-issue-in-wireless-radio-component","title":"Apple iOS input validation issue in wireless radio component","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.447+00:00","url":"https://junglewise.ai/threats/cve-2026-86885-apple-ios-input-validation-issue-in-wireless-radio-component"},{"cve":"CVE-2026-86884","cvss":5.5,"epss":0.0014,"slug":"cve-2026-86884-apple-ios-and-ipados-app-store-permissions-issue","title":"Apple iOS and iPadOS App Store permissions issue","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.34+00:00","url":"https://junglewise.ai/threats/cve-2026-86884-apple-ios-and-ipados-app-store-permissions-issue"},{"cve":"CVE-2026-86883","cvss":5.5,"epss":0.0015,"slug":"cve-2026-86883-apple-ios-accessibility-privacy-issue-in-file-handling","title":"Apple iOS Accessibility privacy issue in file handling","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.23+00:00","url":"https://junglewise.ai/threats/cve-2026-86883-apple-ios-accessibility-privacy-issue-in-file-handling"},{"cve":"CVE-2026-86882","cvss":6.5,"epss":0.0048,"slug":"cve-2026-86882-apple-accelerate-framework-out-of-bounds-write-in-image","title":"Apple Accelerate Framework out-of-bounds write in image processing","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:39.123+00:00","url":"https://junglewise.ai/threats/cve-2026-86882-apple-accelerate-framework-out-of-bounds-write-in-image"},{"cve":"CVE-2026-86881","cvss":9.1,"epss":0.004,"slug":"cve-2026-86881-apple-ios-ipados-and-macos-certificate-validation-bypass","title":"Apple iOS, iPadOS, and macOS certificate validation bypass","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:39.01+00:00","url":"https://junglewise.ai/threats/cve-2026-86881-apple-ios-ipados-and-macos-certificate-validation-bypass"},{"cve":"CVE-2026-86879","cvss":6.5,"epss":0.0039,"slug":"cve-2026-86879-apple-ios-and-ipados-input-validation-denial-of-service","title":"Apple iOS and iPadOS input validation denial-of-service","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.893+00:00","url":"https://junglewise.ai/threats/cve-2026-86879-apple-ios-and-ipados-input-validation-denial-of-service"},{"cve":"CVE-2026-86878","cvss":5.5,"epss":0.0015,"slug":"cve-2026-86878-apple-ios-and-ipados-permissions-issue-allowing-sensitive-data","title":"Apple iOS and iPadOS permissions issue allowing sensitive data access","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.797+00:00","url":"https://junglewise.ai/threats/cve-2026-86878-apple-ios-and-ipados-permissions-issue-allowing-sensitive-data"},{"cve":"CVE-2026-86876","cvss":5.2,"epss":0.0015,"slug":"cve-2026-86876-apple-accelerate-framework-out-of-bounds-write-in-image","title":"Apple Accelerate Framework out-of-bounds write in image processing","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.687+00:00","url":"https://junglewise.ai/threats/cve-2026-86876-apple-accelerate-framework-out-of-bounds-write-in-image"},{"cve":"CVE-2026-86870","cvss":6.5,"epss":0.0045,"slug":"cve-2026-86870-apple-ios-ipados-macos-visionos-watchos-heap-buffer-overflow-in","title":"Apple iOS, iPadOS, macOS, visionOS, watchOS heap buffer overflow in Accelerate Framework","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.58+00:00","url":"https://junglewise.ai/threats/cve-2026-86870-apple-ios-ipados-macos-visionos-watchos-heap-buffer-overflow-in"},{"cve":"CVE-2026-86869","cvss":6.5,"epss":0.0034,"slug":"cve-2026-86869-apple-accelerate-framework-out-of-bounds-write-in-image","title":"Apple Accelerate Framework out-of-bounds write in image processing","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.48+00:00","url":"https://junglewise.ai/threats/cve-2026-86869-apple-accelerate-framework-out-of-bounds-write-in-image"},{"cve":"CVE-2026-84636","cvss":5.5,"epss":0.0014,"slug":"cve-2026-84636-apple-ios-authorization-bypass-in-state-management","title":"Apple iOS authorization bypass in state management","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.377+00:00","url":"https://junglewise.ai/threats/cve-2026-84636-apple-ios-authorization-bypass-in-state-management"},{"cve":"CVE-2026-84635","cvss":6.5,"epss":0.0037,"slug":"cve-2026-84635-apple-safari-logic-issue-in-state-management","title":"Apple Safari logic issue in state management","severity":"medium","exploited":false,"published_at":"2026-09-14T21:17:38.26+00:00","url":"https://junglewise.ai/threats/cve-2026-84635-apple-safari-logic-issue-in-state-management"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":37},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":84},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":30},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":5,"exploited":0,"vulnerabilities":139},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Apple macOS","slug":"macos-tahoe","vulnerabilities":907,"url":"https://junglewise.ai/threats/technologies/macos-tahoe"},{"name":"Apple visionOS","slug":"visionos","vulnerabilities":291,"url":"https://junglewise.ai/threats/technologies/visionos"},{"name":"Apple watchOS","slug":"watchos","vulnerabilities":288,"url":"https://junglewise.ai/threats/technologies/watchos"},{"name":"Apple tvOS","slug":"tvos","vulnerabilities":260,"url":"https://junglewise.ai/threats/technologies/tvos"},{"name":"Apple macOS Golden Gate","slug":"macos-golden-gate","vulnerabilities":172,"url":"https://junglewise.ai/threats/technologies/macos-golden-gate"},{"name":"Apple Iphone Os","slug":"iphone-os","vulnerabilities":165,"url":"https://junglewise.ai/threats/technologies/iphone-os"},{"name":"Apple Safari","slug":"safari","vulnerabilities":141,"url":"https://junglewise.ai/threats/technologies/safari"},{"name":"Apple Multiple Products","slug":"multiple-products","vulnerabilities":75,"url":"https://junglewise.ai/threats/technologies/multiple-products"},{"name":"Apple macOS Ventura","slug":"macos-ventura","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/macos-ventura"},{"name":"Apple macOS Monterey","slug":"macos-monterey","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/macos-monterey"},{"name":"Apple SwiftNIO","slug":"swiftnio","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/swiftnio"},{"name":"Apple Container","slug":"container","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/container"}],"technology":{"hub":true,"name":"Apple iPadOS","slug":"ipados","vendor":{"name":"Apple","slug":"apple","url":"https://junglewise.ai/threats/vendors/apple"},"aliases":[],"category":"operating-system","homepage":"https://www.apple.com/ipados/","description":"A mobile operating system developed by Apple specifically for its iPad line of tablet computers.","url":"https://junglewise.ai/threats/technologies/ipados"},"most_severe":[{"cve":"CVE-2025-43300","cvss":10,"epss":0.0446,"slug":"cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o","title":"Apple iOS, iPadOS, and macOS out-of-bounds write in Image I/O","severity":"critical","exploited":true,"published_at":"2025-08-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-43300-apple-ios-ipados-and-macos-out-of-bounds-write-in-image-i-o"},{"cve":"CVE-2025-24085","cvss":10,"slug":"cve-2025-24085-apple-multiple-products-use-after-free-vulnerability","title":"Apple Multiple Products Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24085-apple-multiple-products-use-after-free-vulnerability"},{"cve":"CVE-2025-31201","cvss":9.8,"slug":"cve-2025-31201-apple-multiple-products-arbitrary-read-and-write-vulnerability","title":"Apple Multiple Products Arbitrary Read and Write Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31201-apple-multiple-products-arbitrary-read-and-write-vulnerability"},{"cve":"CVE-2025-31200","cvss":9.8,"slug":"cve-2025-31200-apple-multiple-products-memory-corruption-vulnerability","title":"Apple Multiple Products Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-31200-apple-multiple-products-memory-corruption-vulnerability"},{"cve":"CVE-2022-22587","cvss":9.8,"slug":"cve-2022-22587-apple-memory-corruption-vulnerability","title":"Apple Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22587-apple-memory-corruption-vulnerability"},{"cve":"CVE-2021-1870","cvss":9.8,"slug":"cve-2021-1870-apple-ios-ipados-and-macos-webkit-remote-code-execution","title":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1870-apple-ios-ipados-and-macos-webkit-remote-code-execution"},{"cve":"CVE-2021-1871","cvss":9.8,"slug":"cve-2021-1871-apple-ios-ipados-and-macos-webkit-remote-code-execution","title":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-1871-apple-ios-ipados-and-macos-webkit-remote-code-execution"},{"cve":"CVE-2023-43000","cvss":8.8,"epss":0.039,"slug":"cve-2023-43000-apple-multiple-products-use-after-free-in-web-content-processing","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, S","severity":"critical","exploited":true,"published_at":"2025-11-05T19:15:47.937+00:00","url":"https://junglewise.ai/threats/cve-2023-43000-apple-multiple-products-use-after-free-in-web-content-processing"},{"cve":"CVE-2025-31277","cvss":8.8,"epss":0.0148,"slug":"cve-2025-31277-apple-multiple-products-memory-corruption-in-web-content","title":"Apple Multiple Products memory corruption in web content processing","severity":"critical","exploited":true,"published_at":"2025-07-30T00:15:30.83+00:00","url":"https://junglewise.ai/threats/cve-2025-31277-apple-multiple-products-memory-corruption-in-web-content"},{"cve":"CVE-2021-30952","cvss":8.8,"epss":0.0089,"slug":"cve-2021-30952-apple-multiple-products-integer-overflow-in-webkit-content","title":"Apple Multiple Products integer overflow in WebKit content processing","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30952-apple-multiple-products-integer-overflow-in-webkit-content"}],"generated_at":"2026-09-27T03:07:00.185062+00:00"}