CVE Intelligence

Vulnerabilidades do Apple Macos

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Apple Macos: 1050 registro(s), com versões afetadas e correções.
cpe:2.3:o:apple:macos

CVE-2026-39877 Alta · 7.8 CWE-119 27/07/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Macos
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to disclose kernel memory.
CVE-2026-39875 Alta · 7.8 CWE-276 27/07/2026
Incorrect Default Permissions em Apple Macos
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
CVE-2026-39874 Alta · 7.8 CWE-276 27/07/2026
Incorrect Default Permissions em Apple Macos
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
CVE-2026-39873 Crítica · 9.8 CWE-119 27/07/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Macos
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to unexpected system termination.
CVE-2026-28982 Crítica · 9.8 CWE-362 27/07/2026
Race Condition em Apple Macos
A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-28981 Alta · 7.8 CWE-120 27/07/2026
Classic Buffer Overflow em Apple Macos
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2026-28973 Alta · 8.6 CWE-190 27/07/2026
Integer Overflow or Wraparound em Apple Ipados
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. A malicious app may be able to break out of its sandbox.
CVE-2026-28945 Alta · 7.1 CWE-284 27/07/2026
Improper Access Control em Apple Macos
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to bypass network restrictions.
CVE-2026-28932 Média · 5.5 CWE-400 27/07/2026
Uncontrolled Resource Consumption em Apple Macos
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial of service.
CVE-2026-28931 Alta · 8.8 CWE-120 27/07/2026
Classic Buffer Overflow em Apple Ipados
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. Connecting to a malicious NFS server may lead to kernel memory corruption.
CVE-2026-28928 Crítica · 9.8 CWE-416 27/07/2026
Use After Free em Apple Ipados
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-28926 Alta · 7.0 CWE-362 27/07/2026
Race Condition em Apple Macos
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.4. An app may be able to elevate privileges.
CVE-2026-28912 Alta · 7.8 CWE-693 27/07/2026
A logic issue was addressed with improved restrictions. This issue is fixed in macOS…
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Tahoe 26.6. A user may be able to elevate privileges.
CVE-2026-28911 Crítica · 9.8 CWE-119 27/07/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Macos
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.
CVE-2026-28900 Média · 5.5 CWE-290 27/07/2026
Authentication Bypass by Spoofing em Apple Macos
A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.
CVE-2026-28896 Alta · 7.7 CWE-119 27/07/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Macos
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker may be able to cause unexpected system termination or read kernel memory.
CVE-2026-28849 Média · 5.5 CWE-290 27/07/2026
Authentication Bypass by Spoofing em Apple Macos
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.
CVE-2026-20672 Média · 5.5 CWE-200 27/07/2026
Exposure of Sensitive Information em Apple Macos
An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.3. An app may be able to access sensitive user data.
CVE-2026-43746 Média · 6.5 CWE-416 29/06/2026
Use After Free em Apple Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-43745 Média · 6.5 CWE-787 29/06/2026
Out-of-bounds Write em Apple Safari
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-43743 Média · 4.7 CWE-362 29/06/2026
Race Condition em Apple Ipados
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, iOS 26.7 and iPadOS 26.7, macOS Tahoe 26.5.2, macOS Tahoe 26.7, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43742 Média · 6.5 CWE-416 29/06/2026
Use After Free em Apple Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-43740 Média · 6.5 CWE-119 29/06/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may result in the disclosure of process memory.
CVE-2026-43735 Alta · 8.1 CWE-352 29/06/2026
Cross-Site Request Forgery (CSRF) em Apple Safari
The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may exfiltrate data cross-origin.
CVE-2026-43734 Média · 6.5 CWE-416 29/06/2026
Use After Free em Apple Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.