Vulnerabilidades de Apple
CVEs publicadas que afetam produtos de Apple: 1165 registro(s), com severidade, exploração e correções.
Macos 1020Iphone Os 667Ipados 646iOS and iPadOS 644Visionos 431Watchos 404Tvos 372Safari 172Mac Os X 57iOS 18Xcode 10Icloud 6Itunes 5Container 4Swiftnio Http/2 3iOS-1 2macOS Monterey 2Containerization 2Swift-crypto 2Private Cloud Compute Server Software 1Swiftnio Ssh 1Swiftnio 1Servicetalk 1Swiftnio Ssl 1Mac Os X Server 1macOS Tahoe 1macOS Sonoma 1macOS Sequoia 1watchOS-1 1iTunes for Windows 1Pages 1Keynote 1iCloud for Windows 1Compressor 1Private Cloud Compute 1Safari (v and ) 1Os X Server 1
CVE-2026-43691
Alta · 7.8
CWE-22 14/09/2026
Path Traversal em Apple Macos
A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
CVE-2026-43690
Média · 4.7
CWE-362 14/09/2026
Race Condition em Apple Macos
A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be able to read kernel memory.
CVE-2026-43689
Alta · 7.8
CWE-862 14/09/2026
Missing Authorization em Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges.
CVE-2026-43688
Alta · 7.8
CWE-1021 14/09/2026
Clickjacking em Apple Ipados
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-43687
Média · 6.5
CWE-200 14/09/2026
Exposure of Sensitive Information em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory.
CVE-2026-43686
Alta · 8.8
CWE-416 14/09/2026
Use After Free em Apple Ipados
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory corruption.
CVE-2026-43684
Alta · 7.8
CWE-416 14/09/2026
Use After Free em Apple Ipados
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43683
Alta · 7.1
CWE-125 14/09/2026
Out-of-bounds Read em Apple Macos
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected process termination or disclose process memory.
CVE-2026-43677
Média · 6.5
CWE-787 14/09/2026
Out-of-bounds Write em Apple Macos
An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may lead to unexpected app termination.
CVE-2026-43674
Média · 4.6
CWE-287 14/09/2026
Improper Authentication em Apple Ipados
An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication.
CVE-2026-43664
Média · 5.5
CWE-200 14/09/2026
Exposure of Sensitive Information em Apple Ipados
This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access sensitive user data.
CVE-2026-28968
Média · 5.5
CWE-125 14/09/2026
Out-of-bounds Read em Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-28966
Média · 4.3
CWE-787 14/09/2026
Out-of-bounds Write em Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-28960
Alta · 7.5
CWE-20 14/09/2026
Improper Input Validation em Apple Ipados
A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker may be able to cause a denial-of-service.
CVE-2026-28938
Alta · 7.5
CWE-359 14/09/2026
A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6…
A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint the user.
CVE-2026-28937
Média · 5.5
CWE-284 14/09/2026
Improper Access Control em Apple Macos
This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.
CVE-2026-28935
Alta · 7.5
CWE-119 14/09/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-28934
Média · 6.5
CWE-120 14/09/2026
Classic Buffer Overflow em Apple Macos
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination.
CVE-2026-28933
Média · 5.5
CWE-416 14/09/2026
Use After Free em Apple Macos
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2026-28899
Média · 5.5
CWE-693 14/09/2026
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden…
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may bypass Gatekeeper checks.
CVE-2026-28836
Média · 6.1
CWE-359 14/09/2026
A correctness issue was addressed with improved checks. This issue is fixed in macOS…
A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with physical access may be able to silently persist an Apple Account on an erased device.
CVE-2026-20683
Alta · 7.1
CWE-287 14/09/2026
Improper Authentication em Apple Ipados
An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account.
CVE-2026-65367
Média · 5.5
CWE-476 25/08/2026
NULL Pointer Dereference em Apple Ipados
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination.
CVE-2026-64705
Média · 5.5
CWE-120 25/08/2026
Classic Buffer Overflow em Apple Macos
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-43670
Alta · 8.8
CWE-693 25/08/2026
A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet…
A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy.