CVE Intelligence

Vulnerabilidades do Apple iOS and iPadOS

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Apple iOS and iPadOS: 690 registro(s), com versões afetadas e correções.

CVE-2026-43686 Alta · 8.8 CWE-416 14/09/2026
Use After Free em Apple Ipados
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory corruption.
CVE-2026-43684 Alta · 7.8 CWE-416 14/09/2026
Use After Free em Apple Ipados
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43674 Média · 4.6 CWE-287 14/09/2026
Improper Authentication em Apple Ipados
An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication.
CVE-2026-43664 Média · 5.5 CWE-200 14/09/2026
Exposure of Sensitive Information em Apple Ipados
This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access sensitive user data.
CVE-2026-28968 Média · 5.5 CWE-125 14/09/2026
Out-of-bounds Read em Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-28966 Média · 4.3 CWE-787 14/09/2026
Out-of-bounds Write em Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-28960 Alta · 7.5 CWE-20 14/09/2026
Improper Input Validation em Apple Ipados
A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker may be able to cause a denial-of-service.
CVE-2026-28938 Alta · 7.5 CWE-359 14/09/2026
A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6…
A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint the user.
CVE-2026-28935 Alta · 7.5 CWE-119 14/09/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-20683 Alta · 7.1 CWE-287 14/09/2026
Improper Authentication em Apple Ipados
An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account.
CVE-2026-65367 Média · 5.5 CWE-476 25/08/2026
NULL Pointer Dereference em Apple Ipados
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination.
CVE-2026-64705 Média · 5.5 CWE-120 25/08/2026
Classic Buffer Overflow em Apple Macos
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-43670 Alta · 8.8 CWE-693 25/08/2026
A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet…
A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy.
CVE-2026-43657 Baixa · 3.3 CWE-269 25/08/2026
Improper Privilege Management em Apple Iphone Os
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps.
CVE-2026-65351 Média · 4.3 CWE-703 17/08/2026
Improper Check or Handling of Exceptional Conditions em Apple Safari
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65349 Média · 6.6 CWE-125 17/08/2026
Out-of-bounds Read em Apple Ipados
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2026-65347 Média · 6.5 CWE-400 17/08/2026
Uncontrolled Resource Consumption em Apple Ipados
The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to a denial-of-service.
CVE-2026-65346 Alta · 8.8 CWE-190 17/08/2026
Integer Overflow or Wraparound em Apple Ipados
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to arbitrary code execution.
CVE-2026-65343 Alta · 7.5 CWE-416 17/08/2026
Use After Free em Apple Ipados
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected system termination.
CVE-2026-65341 Média · 5.4 CWE-119 17/08/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
CVE-2026-65340 Média · 4.3 CWE-20 17/08/2026
Improper Input Validation em Apple Safari
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65339 Média · 5.0 CWE-693 17/08/2026
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and…
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive user information.
CVE-2026-65338 Média · 4.3 CWE-119 17/08/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65337 Média · 4.3 CWE-20 17/08/2026
Improper Input Validation em Apple Safari
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65336 Média · 4.3 CWE-20 17/08/2026
Improper Input Validation em Apple Ipados
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.