iPadOS vulnerabilities

695 known vulnerabilities in iPadOS from Apple. 682 are rated high or critical, and 81 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Apple iOS, iPadOS, macOS Use-After-Free Exploited

  CVE-2021-30858Aug 24, 2021AppleEPSS 13.4%

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this iss

• 6.1 Medium severity

  Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Exploited

  CVE-2021-1879Apr 2, 2021AppleEPSS 7.08%

  This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a repo

• 9.8 Critical severity

  Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Exploited

  CVE-2021-1871Apr 2, 2021AppleEPSS 7%

  A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Ap

• 9.8 Critical severity

  Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Exploited

  CVE-2021-1870Apr 2, 2021AppleEPSS 7.71%

  A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Ap

• 8.8 High severity

  Apple Multiple Products Type Confusion Exploited

  CVE-2021-1789Apr 2, 2021AppleEPSS 14%

  A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing malici

• 7.0 High severity

  Apple Multiple Products Race Condition Exploited

  CVE-2021-1782Apr 2, 2021AppleEPSS 2.2%

  A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevat

• 5.5 Medium severity

  Apple Multiple Products Memory Initialization Exploited

  CVE-2020-27950Dec 8, 2020AppleEPSS 16.5%

  A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.

• 7.8 High severity

  Apple Multiple Products Type Confusion Exploited

  CVE-2020-27932Dec 8, 2020AppleEPSS 10.3%

  A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3

• 7.8 High severity

  Apple Multiple Products Memory Corruption Exploited

  CVE-2020-27930Dec 8, 2020AppleEPSS 22%

  A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchO

• 5.5 Medium severity

  Apple iOS, iPadOS, and macOS Input Validation Exploited

  CVE-2020-9934Oct 16, 2020AppleEPSS 3.21%

  An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information.

• 7.8 High severity

  Apple Multiple Products Memory Corruption Exploited

  CVE-2020-9907Oct 16, 2020AppleEPSS 3.2%

  A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.

• 4.3 Medium severity

  Apple iOS, iPadOS, and watchOS Memory Corruption Exploited

  CVE-2020-9819Jun 9, 2020AppleEPSS 2.23%

  A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.

• 8.8 High severity

  Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Exploited

  CVE-2020-9818Jun 9, 2020AppleEPSS 2.34%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termin

• 7.8 High severity

  Apple Multiple Products Code Execution Exploited

  CVE-2020-9859Jun 5, 2020Apple

  A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kerne

• 7.8 High severity

  Apple Multiple Products Memory Corruption Exploited

  CVE-2020-3837Feb 27, 2020AppleEPSS 14.8%

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.