Vulnerabilidades do Apple Ipados

CVE-2026-43702 Alta · 7.8 CWE-119 14/09/2026

Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.

CVE-2026-43695 Média · 5.5 CWE-863 14/09/2026

Incorrect Authorization em Apple Ipados

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.

CVE-2026-43689 Alta · 7.8 CWE-862 14/09/2026

Missing Authorization em Apple Ipados

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges.

CVE-2026-43688 Alta · 7.8 CWE-1021 14/09/2026

Clickjacking em Apple Ipados

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing a maliciously crafted file may lead to unexpected app termination.

CVE-2026-43687 Média · 6.5 CWE-200 14/09/2026

Exposure of Sensitive Information em Apple Ipados

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory.

CVE-2026-43686 Alta · 8.8 CWE-416 14/09/2026

Use After Free em Apple Ipados

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory corruption.

CVE-2026-43684 Alta · 7.8 CWE-416 14/09/2026

Use After Free em Apple Ipados

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-43674 Média · 4.6 CWE-287 14/09/2026

Improper Authentication em Apple Ipados

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication.

CVE-2026-43664 Média · 5.5 CWE-200 14/09/2026

Exposure of Sensitive Information em Apple Ipados

This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access sensitive user data.

CVE-2026-28968 Média · 5.5 CWE-125 14/09/2026

Out-of-bounds Read em Apple Ipados

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-28966 Média · 4.3 CWE-787 14/09/2026

Out-of-bounds Write em Apple Ipados

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted file may lead to unexpected app termination.

CVE-2026-28960 Alta · 7.5 CWE-20 14/09/2026

Improper Input Validation em Apple Ipados

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker may be able to cause a denial-of-service.

CVE-2026-28938 Alta · 7.5 CWE-359 14/09/2026

A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6…

A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint the user.

CVE-2026-28935 Alta · 7.5 CWE-119 14/09/2026

Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-20683 Alta · 7.1 CWE-287 14/09/2026

Improper Authentication em Apple Ipados

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account.

CVE-2026-65367 Média · 5.5 CWE-476 25/08/2026

NULL Pointer Dereference em Apple Ipados

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination.

CVE-2026-43670 Alta · 8.8 CWE-693 25/08/2026

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet…

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy.

CVE-2026-65351 Média · 4.3 CWE-703 17/08/2026

Improper Check or Handling of Exceptional Conditions em Apple Safari

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVE-2026-65349 Média · 6.6 CWE-125 17/08/2026

Out-of-bounds Read em Apple Ipados

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or read kernel memory.

CVE-2026-65347 Média · 6.5 CWE-400 17/08/2026

Uncontrolled Resource Consumption em Apple Ipados

The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to a denial-of-service.

CVE-2026-65346 Alta · 8.8 CWE-190 17/08/2026

Integer Overflow or Wraparound em Apple Ipados

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to arbitrary code execution.

CVE-2026-65343 Alta · 7.5 CWE-416 17/08/2026

Use After Free em Apple Ipados

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected system termination.

CVE-2026-65341 Média · 5.4 CWE-119 17/08/2026

Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.

CVE-2026-65340 Média · 4.3 CWE-20 17/08/2026

Improper Input Validation em Apple Safari

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVE-2026-65339 Média · 5.0 CWE-693 17/08/2026

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and…

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive user information.