CVE Intelligence

Vulnerabilidades de Apple

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Apple: 1165 registro(s), com severidade, exploração e correções.

Macos 1020Iphone Os 667Ipados 646iOS and iPadOS 644Visionos 431Watchos 404Tvos 372Safari 172Mac Os X 57iOS 18Xcode 10Icloud 6Itunes 5Container 4Swiftnio Http/2 3iOS-1 2macOS Monterey 2Containerization 2Swift-crypto 2Private Cloud Compute Server Software 1Swiftnio Ssh 1Swiftnio 1Servicetalk 1Swiftnio Ssl 1Mac Os X Server 1macOS Tahoe 1macOS Sonoma 1macOS Sequoia 1watchOS-1 1iTunes for Windows 1Pages 1Keynote 1iCloud for Windows 1Compressor 1Private Cloud Compute 1Safari (v and ) 1Os X Server 1

Somente exploradas (KEV) →

CVE-2026-43657 Baixa · 3.3 CWE-269 25/08/2026
Improper Privilege Management em Apple Iphone Os
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps.
CVE-2026-43679 Baixa · 2.4 CWE-284 20/08/2026
Improper Access Control em Apple Watchos
This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts.
CVE-2026-20679 Média · 4.3 CWE-125 20/08/2026
Out-of-bounds Read em Apple Macos
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-64773 Alta · 7.5 CWE-770 20/08/2026
Allocation of Resources Without Limits or Throttling em Apple Container
An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wait can be stretched. This vulnerability is addressed in container version 1.2.0.
CVE-2026-43798 Crítica · 9.8 CWE-121 20/08/2026
Stack-based Buffer Overflow em Apple Swiftnio Ssh
A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1.
CVE-2026-64777 Média · 4.3 CWE-22 20/08/2026
Path Traversal em Apple Container
A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0.
CVE-2026-43678 Média · 5.3 CWE-20 20/08/2026
Improper Input Validation em Apple Swiftnio
An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active connections until the process restarts. This vulnerability is addressed in swift-nio version 2.101.0.
CVE-2026-65351 Média · 4.3 CWE-703 17/08/2026
Improper Check or Handling of Exceptional Conditions em Apple Safari
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65349 Média · 6.6 CWE-125 17/08/2026
Out-of-bounds Read em Apple Ipados
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2026-65347 Média · 6.5 CWE-400 17/08/2026
Uncontrolled Resource Consumption em Apple Ipados
The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to a denial-of-service.
CVE-2026-65346 Alta · 8.8 CWE-190 17/08/2026
Integer Overflow or Wraparound em Apple Ipados
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to arbitrary code execution.
CVE-2026-65343 Alta · 7.5 CWE-416 17/08/2026
Use After Free em Apple Ipados
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected system termination.
CVE-2026-65341 Média · 5.4 CWE-119 17/08/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
CVE-2026-65340 Média · 4.3 CWE-20 17/08/2026
Improper Input Validation em Apple Safari
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65339 Média · 5.0 CWE-693 17/08/2026
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and…
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive user information.
CVE-2026-65338 Média · 4.3 CWE-119 17/08/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65337 Média · 4.3 CWE-20 17/08/2026
Improper Input Validation em Apple Safari
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65336 Média · 4.3 CWE-20 17/08/2026
Improper Input Validation em Apple Ipados
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65335 Média · 4.3 CWE-119 17/08/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65334 Média · 4.3 CWE-119 17/08/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65333 Média · 4.3 CWE-119 17/08/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65332 Média · 4.3 CWE-703 17/08/2026
Improper Check or Handling of Exceptional Conditions em Apple Safari
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65331 Média · 4.3 CWE-703 17/08/2026
Improper Check or Handling of Exceptional Conditions em Apple Safari
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-65330 Média · 6.5 CWE-119 17/08/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-65329 Média · 5.9 CWE-287 17/08/2026
Improper Authentication em Apple Ipados
An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic.