Vulnerabilidades do Apple iOS and iPadOS
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Apple iOS and iPadOS: 870 registro(s), com versões afetadas e correções.
CVE-2026-28994
Média · 5.3
CWE-416 11/05/2026
A use after free issue was addressed with improved memory management. This issue is fixed in iOS...
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Wi-Fi packets.
CVE-2026-28993
Média · 5.5
CWE-284 11/05/2026
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in...
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access user-sensitive data.
CVE-2026-28992
Média · 4.7
CWE-362 11/05/2026
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS...
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An attacker may be able to cause unexpected app termination.
CVE-2026-28991
Alta · 7.5
CWE-125 11/05/2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26...
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.8.2, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause a denial-of-service.
CVE-2026-28990
Alta · 7.5
CWE-119 11/05/2026
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS...
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.
CVE-2026-28988
Média · 5.5
CWE-284 11/05/2026
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5...
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5, watchOS 26.5. An app may be able to bypass certain Privacy preferences.
CVE-2026-28987
Alta · 7.5
CWE-532 11/05/2026
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and...
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to leak sensitive kernel state.
CVE-2026-28986
Alta · 7.5
CWE-362 11/05/2026
A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and...
A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.
CVE-2026-28985
Média · 6.2
CWE-476 11/05/2026
A null pointer dereference was addressed with improved input validation. This issue is fixed in...
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5. An attacker on the local network may be able to cause a denial-of-service.
CVE-2026-28983
Alta · 7.5
CWE-843 11/05/2026
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and...
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A remote attacker may be able to cause a denial of service.
CVE-2026-28977
Média · 6.2
CWE-119 11/05/2026
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.9 and iPadOS...
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-28974
Alta · 7.5
CWE-284 11/05/2026
This issue was addressed with improved checks to prevent unauthorized actions. This issue is...
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause a denial-of-service.
CVE-2026-28972
Média · 6.5
CWE-787 11/05/2026
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-28971
Média · 4.3
CWE-1021 11/05/2026
The issue was addressed with improved UI handling. This issue is fixed in iOS 26.5 and iPadOS 26...
The issue was addressed with improved UI handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. A malicious iframe may use another website’s download settings.
CVE-2026-28969
Alta · 7.5
CWE-416 11/05/2026
A use after free issue was addressed with improved memory management. This issue is fixed in iOS...
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.7, macOS Sequoia 15.8, macOS Sonoma 14.8.7, macOS Tahoe 26.5, macOS Tahoe 26.7, tvOS 26.5, tvOS 27, visionOS 26.5, visionOS 27, watchOS 26.5, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-28967
Média · 4.9
CWE-400 11/05/2026
A denial-of-service issue was addressed with improved input validation. This issue is fixed in...
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4. An attacker in a privileged network position may be able to cause a denial-of-service.
CVE-2026-28965
Alta · 7.5
CWE-284 11/05/2026
A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.5 and iPadOS 26...
A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.5 and iPadOS 26.5. A user may be able to view restricted content from the lock screen.
CVE-2026-28964
Alta · 7.5
CWE-451 11/05/2026
An inconsistent user interface issue was addressed with improved state management. This…
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to access sensitive user data.
CVE-2026-28963
Média · 4.6
CWE-359 11/05/2026
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5...
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to use Visual Intelligence to access sensitive user data during iPhone Mirroring.
CVE-2026-28962
Alta · 7.5
CWE-200 11/05/2026
This issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.9 and...
This issue was addressed with improved access restrictions. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. Processing maliciously crafted web content may disclose sensitive user information.
CVE-2026-28959
Alta · 7.5
CWE-120 11/05/2026
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9...
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.
CVE-2026-28958
Média · 5.5
CWE-200 11/05/2026
This issue was addressed with improved data protection. This issue is fixed in iOS 26.5 and...
This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.
CVE-2026-28957
Baixa · 3.3
CWE-284 11/05/2026
An issue with app access to camera metadata was addressed with improved logic. This issue is...
An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to capture a user's screen.
CVE-2026-28956
Média · 6.5
CWE-125 11/05/2026
A memory corruption issue was addressed with improved input validation. This issue is fixed in...
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
CVE-2026-28955
Alta · 8.8
CWE-119 11/05/2026
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.