Vulnerabilidades do Apple Macos

CVE-2025-46297 Média · 5.5 CWE-284 09/01/2026

Improper Access Control em Apple Macos

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected files within an App Sandbox container.

CVE-2025-46291 Alta · 7.8 CWE-693 17/12/2025

A logic issue was addressed with improved validation. This issue is fixed in macOS…

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.2. An app may bypass Gatekeeper checks.

CVE-2025-46288 Média · 5.5 CWE-284 17/12/2025

Improper Access Control em Apple Ipados

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive payment tokens.

CVE-2025-46283 Média · 5.5 CWE-200 17/12/2025

Exposure of Sensitive Information em Apple Macos

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access sensitive user data.

CVE-2025-46282 Média · 5.5 CWE-284 17/12/2025

Improper Access Control em Apple Safari

The issue was addressed with additional permissions checks. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. An app may be able to access sensitive user data.

CVE-2025-46281 Alta · 8.8 CWE-693 17/12/2025

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia…

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to break out of its sandbox.

CVE-2025-46278 Média · 5.5 CWE-200 17/12/2025

Exposure of Sensitive Information em Apple Macos

The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected user data.

CVE-2025-46277 Baixa · 3.3 CWE-532 17/12/2025

Insertion of Sensitive Information into Log File em Apple Ipados

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, watchOS 26.2. An app may be able to access a user’s Safari history.

CVE-2025-46279 Baixa · 3.3 CWE-200 17/12/2025

Exposure of Sensitive Information em Apple Ipados

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to identify what other apps a user has installed.

CVE-2025-43536 Média · 4.3 CWE-416 17/12/2025

Use After Free em Apple Safari

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

CVE-2025-43541 Média · 4.3 CWE-843 17/12/2025

Type Confusion em Apple Safari

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVE-2025-43535 Média · 4.3 17/12/2025

The issue was addressed with improved memory handling. This issue is fixed in Safari…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

CVE-2025-43533 Média · 5.7 CWE-20 17/12/2025

Improper Input Validation em Apple Ipados

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.

CVE-2025-43526 Crítica · 9.8 CWE-601 17/12/2025

Open Redirect em Apple Safari

This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted.

CVE-2025-43531 Baixa · 3.1 CWE-362 17/12/2025

Race Condition em Apple Safari

A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

CVE-2025-43529 Alta · 8.8 KEV Alta · 61 Exploit público CWE-416 17/12/2025

Apple Multiple Products Use-After-Free WebKit Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.

CVE-2025-43514 Média · 5.5 CWE-200 17/12/2025

Exposure of Sensitive Information em Apple Macos

The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected user data.

CVE-2025-43501 Média · 4.3 CWE-787 17/12/2025

Out-of-bounds Write em Apple Safari

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

CVE-2025-43428 Crítica · 9.8 CWE-306 17/12/2025

Missing Authentication for Critical Function em Apple Ipados

A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Photos in the Hidden Photos Album may be viewed without authentication.

CVE-2025-46289 Média · 5.5 CWE-285 12/12/2025

Improper Authorization em Apple Macos

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data.

CVE-2025-46287 Média · 6.5 CWE-451 12/12/2025

An inconsistent user interface issue was addressed with improved state management. This…

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An attacker may be able to spoof their FaceTime caller ID.

CVE-2025-46285 Alta · 7.8 CWE-190 12/12/2025

Integer Overflow or Wraparound em Apple Macos

An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to gain root privileges.

CVE-2025-46276 Média · 5.5 12/12/2025

An information disclosure issue was addressed with improved privacy controls. This issue…

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data.

CVE-2025-43542 Alta · 7.5 CWE-200 12/12/2025

Exposure of Sensitive Information em Apple Macos

This issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Tahoe 26.2, visionOS 26.2. Password fields may be unintentionally revealed when remotely controlling a device over FaceTime.

CVE-2025-43539 Alta · 8.8 CWE-787 12/12/2025

Out-of-bounds Write em Apple Macos

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing a file may lead to memory corruption.