iPadOS vulnerabilities and fixes

CVEs that mention iPadOS, ranked by priority. 18 tracked.

iPadOS has 18 tracked vulnerabilities, 6 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 18. Most recent: 2026-09-28. Highest priority: CVE-2026-86950 (score 78/100).

• CVE-2026-86950 HIGH 8.8 EXPLOITED UPGRADE UPGRADE Apple Multiple Products Out-of-Bounds Write Vulnerability
• CVE-2026-64695 CRITICAL 9.8 UPGRADE The issue was addressed with improved memory handling
• CVE-2026-43748 CRITICAL 9.8 UPGRADE An out-of-bounds write issue was addressed with improved bounds checking
• CVE-2026-43757 CRITICAL 9.8 UPGRADE An out-of-bounds read was addressed with improved bounds checking
• CVE-2026-43802 CRITICAL 9.8 UPGRADE An out-of-bounds write issue was addressed with improved bounds checking
• CVE-2026-43809 CRITICAL 9.8 UPGRADE An out-of-bounds read was addressed with improved bounds checking
• CVE-2026-64738 CRITICAL 9.8 UPGRADE A permissions issue was addressed with additional restrictions
• CVE-2026-43715 HIGH 8.8 UPGRADE UPGRADE A use-after-free issue was addressed with improved memory management
• CVE-2026-28896 HIGH 7.7 UPGRADE The issue was addressed with improved memory handling
• CVE-2026-39877 HIGH 7.8 UPGRADE A memory corruption issue was addressed with improved memory handling
• CVE-2026-65329 MEDIUM 5.9 UPGRADE UPGRADE An authentication issue was addressed with improved state management
• CVE-2026-43738 MEDIUM 5.5 UPGRADE The issue was addressed with improved memory handling
• CVE-2026-43754 MEDIUM 5.5 UPGRADE This issue was addressed with improved redaction of sensitive information
• CVE-2026-64744 MEDIUM 5.5 UPGRADE An information leakage was addressed with additional validation
• CVE-2026-64760 MEDIUM 5.5 UPGRADE UPGRADE An information leakage was addressed with additional validation
• CVE-2026-64723 MEDIUM 5.5 UPGRADE A logic issue was addressed with improved checks
• CVE-2026-64732 MEDIUM 4.6 UPGRADE UPGRADE This issue was addressed through improved state management
• CVE-2026-43811 MEDIUM 4.7 UPGRADE UPGRADE A race condition was addressed with improved checks

FAQ

How do I fix iPadOS vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is iPadOS being exploited right now?

Yes: 1 iPadOS CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which iPadOS CVE should I patch first?

CVE-2026-86950 currently ranks highest (78/100): Apple Multiple Products Out-of-Bounds Write Vulnerability.

← Back to latest CVEs