Vulnerabilidades de Apple
CVEs publicadas que afetam produtos de Apple: 709 registro(s), com severidade, exploração e correções.
Macos 604Iphone Os 409Ipados 389iOS and iPadOS 372Watchos 238Visionos 232Tvos 210Safari 132Mac Os X 57iOS 18Xcode 9Icloud 6Itunes 5Swiftnio Http/2 2iOS-1 2Container 2macOS Monterey 2Mac Os X Server 1Os X Server 1macOS Tahoe 1macOS Sonoma 1macOS Sequoia 1Private Cloud Compute Server Software 1Pages 1Keynote 1Containerization 1Compressor 1Private Cloud Compute 1Swift-crypto 1watchOS-1 1Safari (v and ) 1iCloud for Windows 1iTunes for Windows 1
CVE-2026-43708
Média · 4.3
CWE-20 29/06/2026
Improper Input Validation em Apple Safari
The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may exfiltrate data cross-origin.
CVE-2026-43707
Média · 6.5
CWE-119 29/06/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari
A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-43706
Média · 6.5
CWE-415 29/06/2026
Double Free em Apple Ipados
A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-43705
Alta · 8.8
CWE-843 29/06/2026
Type Confusion em Apple Safari
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.
CVE-2026-43704
Média · 5.3
CWE-416 29/06/2026
Use After Free em Apple Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious web extension may be able to cause an unexpected process crash.
CVE-2026-43703
Média · 6.5
CWE-125 29/06/2026
Out-of-bounds Read em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-43701
Alta · 7.1
CWE-284 29/06/2026
Improper Access Control em Apple Safari
The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox.
CVE-2026-43700
Média · 6.5
CWE-346 29/06/2026
A cross-origin issue was addressed with improved tracking of security origins. This…
A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may disclose sensitive user information.
CVE-2026-43699
Média · 6.5
CWE-416 29/06/2026
Use After Free em Apple Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-43676
Média · 6.5
CWE-125 29/06/2026
Out-of-bounds Read em Apple Safari
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-43663
Média · 6.5
CWE-119 29/06/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-39872
Média · 6.5
CWE-119 29/06/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-39868
Crítica · 9.1
CWE-20 29/06/2026
Vulnerabilidade de validação de entrada imprópria no Apple iOS, iPadOS, macOS, tvOS, visionOS e watchOS
Este problema foi corrigido com validação de entrada aprimorada. Este problema está corrigido no iOS 18.7.10 e iPadOS 18.7.10, iOS 26.5.2 e iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Um app pode conseguir causar encerramento inesperado do sistema ou corromper a memória do kernel.
CVE-2026-28979
Média · 6.5
CWE-125 29/06/2026
Out-of-bounds Read em Apple Safari
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28898
Média · 5.3
CWE-116 25/06/2026
Improper Encoding or Escaping of Output em Apple Swiftnio Http/2
swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the translated HTTP/1.1 message. swift-nio-http2 1.44.1 adds validation of all pseudo-header values (:path, :authority, :scheme, :method, and :status) at both the HPACK header validation layer and the HTTP/2-to-HTTP/1.1 translation layer. Requests or responses containing CR, LF, or NUL bytes in any pseudo-header value are now rejected with a connection error. This issue is fixed in swift-nio-http2 1.44.1.
CVE-2025-46315
Alta · 7.5
CWE-284 11/06/2026
Improper Access Control em Apple Macos
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data.
CVE-2025-46313
Média · 5.5
CWE-532 11/06/2026
Insertion of Sensitive Information into Log File em Apple Macos
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVE-2025-46308
Média · 5.3
CWE-284 11/06/2026
Improper Access Control em Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to leak sensitive user information.
CVE-2025-46293
Média · 5.5
CWE-59 11/06/2026
Link Following em Apple Macos
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.
CVE-2025-43339
Média · 5.5
CWE-284 11/06/2026
Improper Access Control em Apple Macos
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to access sensitive user data.
CVE-2025-43278
Média · 5.5
CWE-61 11/06/2026
This issue was addressed with improved handling of symlinks. This issue is fixed in…
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.
CVE-2025-31272
Alta · 7.8
CWE-269 11/06/2026
Improper Privilege Management em Apple Macos
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges.
CVE-2025-30459
Média · 5.5
CWE-359 11/06/2026
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in…
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.
CVE-2025-30431
Média · 5.5
CWE-693 11/06/2026
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4…
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access private information.
CVE-2025-24284
Alta · 8.8
CWE-693 11/06/2026
This issue was addressed with improved checks to prevent unauthorized actions. This…
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Sequoia 15.4. An app may be able to break out of its sandbox.