Vulnerabilidades de Apple
CVEs publicadas que afetam produtos de Apple: 1165 registro(s), com severidade, exploração e correções.
Macos 1020Iphone Os 667Ipados 646iOS and iPadOS 644Visionos 431Watchos 404Tvos 372Safari 172Mac Os X 57iOS 18Xcode 10Icloud 6Itunes 5Container 4Swiftnio Http/2 3iOS-1 2macOS Monterey 2Containerization 2Swift-crypto 2Private Cloud Compute Server Software 1Swiftnio Ssh 1Swiftnio 1Servicetalk 1Swiftnio Ssl 1Mac Os X Server 1macOS Tahoe 1macOS Sonoma 1macOS Sequoia 1watchOS-1 1iTunes for Windows 1Pages 1Keynote 1iCloud for Windows 1Compressor 1Private Cloud Compute 1Safari (v and ) 1Os X Server 1
CVE-2026-28972
Média · 6.5
CWE-787 11/05/2026
Out-of-bounds Write em Apple Ipados
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-28971
Média · 4.3
CWE-1021 11/05/2026
Clickjacking em Apple Ipados
The issue was addressed with improved UI handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. A malicious iframe may use another website’s download settings.
CVE-2026-28969
Alta · 7.5
CWE-416 11/05/2026
Use After Free em Apple Ipados
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.7, macOS Sequoia 15.8, macOS Sonoma 14.8.7, macOS Tahoe 26.5, macOS Tahoe 26.7, tvOS 26.5, tvOS 27, visionOS 26.5, visionOS 27, watchOS 26.5, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-28967
Média · 4.9
CWE-400 11/05/2026
Uncontrolled Resource Consumption em Apple Ipados
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4. An attacker in a privileged network position may be able to cause a denial-of-service.
CVE-2026-28965
Alta · 7.5
CWE-284 11/05/2026
Improper Access Control em Apple Ipados
A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.5 and iPadOS 26.5. A user may be able to view restricted content from the lock screen.
CVE-2026-28964
Alta · 7.5
CWE-451 11/05/2026
An inconsistent user interface issue was addressed with improved state management. This…
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to access sensitive user data.
CVE-2026-28963
Média · 4.6
CWE-359 11/05/2026
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in…
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to use Visual Intelligence to access sensitive user data during iPhone Mirroring.
CVE-2026-28962
Alta · 7.5
CWE-200 11/05/2026
Exposure of Sensitive Information em Apple Ipados
This issue was addressed with improved access restrictions. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. Processing maliciously crafted web content may disclose sensitive user information.
CVE-2026-28961
Média · 4.6
CWE-522 11/05/2026
Insufficiently Protected Credentials em Apple Macos
This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. An attacker with physical access to a locked device may be able to view sensitive user information.
CVE-2026-28959
Alta · 7.5
CWE-120 11/05/2026
Classic Buffer Overflow em Apple Ipados
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.
CVE-2026-28958
Média · 5.5
CWE-200 11/05/2026
Exposure of Sensitive Information em Apple Ipados
This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.
CVE-2026-28957
Baixa · 3.3
CWE-284 11/05/2026
Improper Access Control em Apple Ipados
An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to capture a user's screen.
CVE-2026-28956
Média · 6.5
CWE-125 11/05/2026
Out-of-bounds Read em Apple Ipados
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
CVE-2026-28955
Alta · 8.8
CWE-119 11/05/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28954
Alta · 7.5
CWE-290 11/05/2026
Authentication Bypass by Spoofing em Apple Ipados
A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A maliciously crafted disk image may bypass Gatekeeper checks.
CVE-2026-28953
Alta · 7.5
CWE-119 11/05/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28952
Alta · 7.5
CWE-190 11/05/2026
Integer Overflow or Wraparound em Apple Ipados
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to cause unexpected system termination.
CVE-2026-28951
Alta · 7.8
CWE-863 11/05/2026
Incorrect Authorization em Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to gain root privileges.
CVE-2026-28947
Alta · 8.8
CWE-416 11/05/2026
Use After Free em Apple Ipados
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-28946
Média · 6.5
CWE-416 11/05/2026
Use After Free em Apple Macos
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-28944
Alta · 7.5
CWE-119 11/05/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28943
Alta · 7.5
CWE-532 11/05/2026
Insertion of Sensitive Information into Log File em Apple Ipados
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to determine kernel memory layout.
CVE-2026-28942
Média · 6.5
CWE-416 11/05/2026
Use After Free em Apple Ipados
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-28941
Alta · 7.1
CWE-119 11/05/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Tahoe 26.5. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.
CVE-2026-28940
Alta · 8.8
CWE-119 11/05/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing a maliciously crafted image may corrupt process memory.