CVE Tools
Track your stack

iPadOS

2,395 CVEs tracked. 81 of them are in CISA KEV.

This hub aggregates every CVE we track for iPadOS, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

iPadOS CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
iPadOS CVEs per month
MonthCVEs
2024-1228
2025-0152
2025-023
2025-0374
2025-0420
2025-0546
2025-061
2025-0730
2025-081
2025-0928
2025-102
2025-1169
2025-1219
2026-019
2026-0249
2026-0344
2026-043
2026-0570
2026-0638
2026-0784
2026-0834
2026-09138
2026-10188
2026-110

Severity

How the 2,395 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1406%
  • High99241%
  • Medium1,11947%
  • Low1446%

Latest CVEs

The 15 most recently published vulnerabilities affecting iPadOS.

  1. CVE-2026-86925An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive u...5.5
  2. CVE-2026-84627A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7....7.8
  3. CVE-2026-86972A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, ...7.8
  4. CVE-2026-113912An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, m...7.1
  5. CVE-2026-86964A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An ...7.5
  6. CVE-2026-113904A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, ...4.3
  7. CVE-2026-112616An authorization issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive use...5.5
  8. CVE-2026-112456An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8....7.8
  9. CVE-2026-112682An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, vi...7.5
  10. CVE-2026-113949A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27....8.8
  11. CVE-2026-86991A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tah...7.5
  12. CVE-2026-65385An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, watchOS 27.2. A buffer overfl...7.8
  13. CVE-2026-113908A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.5.5
  14. CVE-2026-86968An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious app may be able to access restricted ...7.5
  15. CVE-2026-112476An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS...7.5

Product grouping is registry-driven, with AI assist and human review. How it works