Vulnerabilidades do Apple Macos

CVE-2026-43676 Média · 6.5 CWE-125 29/06/2026

Out-of-bounds Read em Apple Safari

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVE-2026-43663 Média · 6.5 CWE-119 29/06/2026

Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

CVE-2026-39872 Média · 6.5 CWE-119 29/06/2026

Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

CVE-2026-39868 Crítica · 9.1 CWE-20 29/06/2026

Vulnerabilidade de validação de entrada imprópria no Apple iOS, iPadOS, macOS, tvOS, visionOS e watchOS

Este problema foi corrigido com validação de entrada aprimorada. Este problema está corrigido no iOS 18.7.10 e iPadOS 18.7.10, iOS 26.5.2 e iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Um app pode conseguir causar encerramento inesperado do sistema ou corromper a memória do kernel.

CVE-2026-28979 Média · 6.5 CWE-125 29/06/2026

Out-of-bounds Read em Apple Safari

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

CVE-2025-46315 Alta · 7.5 CWE-284 11/06/2026

Improper Access Control em Apple Macos

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data.

CVE-2025-46313 Média · 5.5 CWE-532 11/06/2026

Insertion of Sensitive Information into Log File em Apple Macos

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVE-2025-46308 Média · 5.3 CWE-284 11/06/2026

Improper Access Control em Apple Ipados

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to leak sensitive user information.

CVE-2025-46293 Média · 5.5 CWE-59 11/06/2026

Link Following em Apple Macos

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.

CVE-2025-43339 Média · 5.5 CWE-284 11/06/2026

Improper Access Control em Apple Macos

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to access sensitive user data.

CVE-2025-43278 Média · 5.5 CWE-61 11/06/2026

This issue was addressed with improved handling of symlinks. This issue is fixed in…

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.

CVE-2025-31272 Alta · 7.8 CWE-269 11/06/2026

Improper Privilege Management em Apple Macos

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges.

CVE-2025-30459 Média · 5.5 CWE-359 11/06/2026

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in…

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.

CVE-2025-30431 Média · 5.5 CWE-693 11/06/2026

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4…

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access private information.

CVE-2025-24284 Alta · 8.8 CWE-693 11/06/2026

This issue was addressed with improved checks to prevent unauthorized actions. This…

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Sequoia 15.4. An app may be able to break out of its sandbox.

CVE-2025-24268 Média · 5.5 CWE-22 11/06/2026

Path Traversal em Apple Macos

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.

CVE-2025-24165 Média · 5.5 CWE-284 11/06/2026

Improper Access Control em Apple Macos

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination.

CVE-2022-48575 Baixa · 3.5 CWE-287 10/06/2026

Improper Authentication em Apple Macos

A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4.

CVE-2022-26758 Alta · 7.1 CWE-362 10/06/2026

Race Condition em Apple Macos

A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4.

CVE-2025-46307 Média · 5.5 CWE-284 26/05/2026

Improper Access Control em Apple Macos

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data.

CVE-2025-46284 Alta · 7.0 CWE-362 26/05/2026

Race Condition em Apple Macos

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An app may be able to gain root privileges.

CVE-2025-46280 Média · 5.5 CWE-125 26/05/2026

Out-of-bounds Read em Apple Macos

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination.

CVE-2025-43451 Média · 5.5 CWE-284 26/05/2026

Improper Access Control em Apple Macos

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data.

CVE-2025-43306 Alta · 7.8 CWE-269 26/05/2026

Improper Privilege Management em Apple Macos

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to gain root privileges.

CVE-2025-43290 Média · 5.5 CWE-732 26/05/2026

Incorrect Permission Assignment for Critical Resource em Apple Macos

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to modify protected parts of the file system.