CVE Intelligence

Vulnerabilidades do Apple iOS and iPadOS

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Apple iOS and iPadOS: 870 registro(s), com versões afetadas e correções.

CVE-2025-46300 Média · 5.7 CWE-119 11/02/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.
CVE-2025-46290 Alta · 7.5 CWE-693 11/02/2026
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and…
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. A remote attacker may be able to cause a denial-of-service.
CVE-2025-43537 Média · 5.5 CWE-22 11/02/2026
Path Traversal em Apple Ipados
A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2. Restoring a maliciously crafted backup file may lead to modification of protected system files.
CVE-2025-46316 Média · 4.3 CWE-125 28/01/2026
Out-of-bounds Read em Apple Pages
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Pages 15.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. Processing a maliciously crafted Pages document may result in unexpected termination or disclosure of process memory.
CVE-2025-46306 Média · 5.5 CWE-125 28/01/2026
Out-of-bounds Read em Apple Keynote
The issue was addressed with improved bounds checks. This issue is fixed in Keynote 15.1, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing a maliciously crafted Keynote file may disclose memory contents.
CVE-2025-24090 Baixa · 3.3 CWE-200 16/01/2026
Exposure of Sensitive Information em Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3. An app may be able to enumerate a user's installed apps.
CVE-2025-24089 Média · 5.3 CWE-200 16/01/2026
Exposure of Sensitive Information em Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3. An app may be able to enumerate a user's installed apps.
CVE-2024-54556 Baixa · 2.4 CWE-284 16/01/2026
Improper Access Control em Apple Ipados
This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. A user may be able to view restricted content from the lock screen.
CVE-2024-44238 Alta · 7.8 CWE-119 16/01/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An app may be able to corrupt coprocessor memory.
CVE-2025-46299 Média · 4.3 CWE-284 09/01/2026
Improper Access Control em Apple Safari
A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may disclose internal states of the app.
CVE-2025-46298 Média · 6.5 CWE-119 09/01/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-46286 Média · 4.3 CWE-288 09/01/2026
Authentication Bypass Using an Alternate Path or Channel em Apple Ipados
A logic issue was addressed with improved validation. This issue is fixed in iOS 26.2 and iPadOS 26.2. Restoring from a backup may prevent passcode from being required immediately after Face ID enrollment.
CVE-2025-46292 Média · 5.5 CWE-284 17/12/2025
Improper Access Control em Apple Ipados
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. An app may be able to access user-sensitive data.
CVE-2025-46288 Média · 5.5 CWE-284 17/12/2025
Improper Access Control em Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive payment tokens.
CVE-2025-46277 Baixa · 3.3 CWE-532 17/12/2025
Insertion of Sensitive Information into Log File em Apple Ipados
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, watchOS 26.2. An app may be able to access a user’s Safari history.
CVE-2025-46279 Baixa · 3.3 CWE-200 17/12/2025
Exposure of Sensitive Information em Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to identify what other apps a user has installed.
CVE-2025-43536 Média · 4.3 CWE-416 17/12/2025
Use After Free em Apple Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43541 Média · 4.3 CWE-843 17/12/2025
Type Confusion em Apple Safari
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43535 Média · 4.3 17/12/2025
The issue was addressed with improved memory handling. This issue is fixed in Safari…
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43533 Média · 5.7 CWE-20 17/12/2025
Improper Input Validation em Apple Ipados
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.
CVE-2025-43531 Baixa · 3.1 CWE-362 17/12/2025
Race Condition em Apple Safari
A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43529 Alta · 8.8 KEV Alta · 62 Exploit público CWE-416 17/12/2025
Apple Multiple Products Use-After-Free WebKit Vulnerability
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.
CVE-2025-43501 Média · 4.3 CWE-787 17/12/2025
Out-of-bounds Write em Apple Safari
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43475 Média · 5.5 CWE-532 17/12/2025
Insertion of Sensitive Information into Log File em Apple Ipados
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2. An app may be able to access user-sensitive data.
CVE-2025-43428 Crítica · 9.8 CWE-306 17/12/2025
Missing Authentication for Critical Function em Apple Ipados
A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Photos in the Hidden Photos Album may be viewed without authentication.