CVE-2025-46316: Apple iPadOS

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Pages 15.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. Processing a maliciously crafted Pages document may result in unexpected termination or disclosure of process memory.

Affected products

• Apple iPadOS: before 26.1 (fixed in 26.1)
• Apple iPhone OS: before 26.1 (fixed in 26.1)
• Apple macOS: before 26.1 (fixed in 26.1)
• Apple Pages: before 15.1 (fixed in 15.1)

Published 2026-01-28. Last modified 2026-06-17.