CVE Intelligence

Vulnerabilidades do Apple iOS and iPadOS

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Apple iOS and iPadOS: 690 registro(s), com versões afetadas e correções.

CVE-2026-65358 Média · 4.7 CWE-362 14/09/2026
Race Condition em Apple Ipados
A race condition was addressed with improved state handling. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-65357 Alta · 7.8 CWE-120 14/09/2026
Classic Buffer Overflow em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-65355 Média · 4.3 CWE-642 14/09/2026
An information disclosure issue was addressed with improved state management. This issue…
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on.
CVE-2026-65354 Alta · 8.2 CWE-269 14/09/2026
Improper Privilege Management em Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.
CVE-2026-65353 Média · 5.5 CWE-285 14/09/2026
Improper Authorization em Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user data.
CVE-2026-65352 Média · 4.3 CWE-642 14/09/2026
An information disclosure issue was addressed with improved state management. This issue…
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on.
CVE-2026-65348 Média · 5.5 CWE-732 14/09/2026
Incorrect Permission Assignment for Critical Resource em Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system.
CVE-2026-65345 Média · 5.5 CWE-284 14/09/2026
Improper Access Control em Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.
CVE-2026-65344 Alta · 7.8 CWE-787 14/09/2026
Out-of-bounds Write em Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted video file may lead to unexpected app termination.
CVE-2026-64761 Alta · 7.5 CWE-200 14/09/2026
Exposure of Sensitive Information em Apple Ipados
A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has installed.
CVE-2026-64756 Média · 5.5 CWE-22 14/09/2026
Path Traversal em Apple Ipados
A path handling issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.
CVE-2026-64753 Média · 6.5 CWE-269 14/09/2026
Improper Privilege Management em Apple Safari
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may disclose sensitive user information.
CVE-2026-64752 Alta · 7.3 CWE-787 14/09/2026
Out-of-bounds Write em Apple Ipados
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2026-64736 Alta · 7.1 CWE-125 14/09/2026
Out-of-bounds Read em Apple Ipados
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-64717 Média · 6.3 CWE-362 14/09/2026
Race Condition em Apple Ipados
A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-64714 Média · 5.5 CWE-119 14/09/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted image may lead to a denial-of-service.
CVE-2026-43808 Média · 5.5 CWE-416 14/09/2026
Use After Free em Apple Ipados
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43785 Média · 5.5 CWE-863 14/09/2026
Incorrect Authorization em Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to modify a file it only had permission to read.
CVE-2026-43762 Média · 5.5 CWE-284 14/09/2026
Improper Access Control em Apple Ipados
The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. An app may be able to access user-sensitive data.
CVE-2026-43737 Média · 5.5 CWE-863 14/09/2026
Incorrect Authorization em Apple Ipados
An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access motion data from headphones without user consent.
CVE-2026-43702 Alta · 7.8 CWE-119 14/09/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
CVE-2026-43695 Média · 5.5 CWE-863 14/09/2026
Incorrect Authorization em Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
CVE-2026-43689 Alta · 7.8 CWE-862 14/09/2026
Missing Authorization em Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges.
CVE-2026-43688 Alta · 7.8 CWE-1021 14/09/2026
Clickjacking em Apple Ipados
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-43687 Média · 6.5 CWE-200 14/09/2026
Exposure of Sensitive Information em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory.