Vulnerabilidades de Apple
CVEs publicadas que afetam produtos de Apple: 1197 registro(s), com severidade, exploração e correções.
Macos 1051Iphone Os 692Ipados 671iOS and iPadOS 670Visionos 449Watchos 424Tvos 390Safari 179Mac Os X 57iOS 18Xcode 10Icloud 6Itunes 5Container 4Swiftnio Http/2 3iOS-1 2macOS Monterey 2Containerization 2Swift-crypto 2Private Cloud Compute Server Software 1Swiftnio Ssh 1Swiftnio 1Servicetalk 1Swiftnio Ssl 1Mac Os X Server 1macOS Tahoe 1macOS Sonoma 1macOS Sequoia 1watchOS-1 1iTunes for Windows 1Pages 1Keynote 1iCloud for Windows 1Compressor 1Private Cloud Compute 1Safari (v and ) 1Os X Server 1
CVE-2025-46299
Média · 4.3
CWE-284 09/01/2026
Improper Access Control em Apple Safari
A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may disclose internal states of the app.
CVE-2025-46298
Média · 6.5
CWE-119 09/01/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-46297
Média · 5.5
CWE-284 09/01/2026
Improper Access Control em Apple Macos
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected files within an App Sandbox container.
CVE-2025-46286
Média · 4.3
CWE-288 09/01/2026
Authentication Bypass Using an Alternate Path or Channel em Apple Ipados
A logic issue was addressed with improved validation. This issue is fixed in iOS 26.2 and iPadOS 26.2. Restoring from a backup may prevent passcode from being required immediately after Face ID enrollment.
CVE-2025-46292
Média · 5.5
CWE-284 17/12/2025
Improper Access Control em Apple Ipados
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. An app may be able to access user-sensitive data.
CVE-2025-46291
Alta · 7.8
CWE-693 17/12/2025
A logic issue was addressed with improved validation. This issue is fixed in macOS…
A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.2. An app may bypass Gatekeeper checks.
CVE-2025-46288
Média · 5.5
CWE-284 17/12/2025
Improper Access Control em Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive payment tokens.
CVE-2025-46283
Média · 5.5
CWE-200 17/12/2025
Exposure of Sensitive Information em Apple Macos
A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access sensitive user data.
CVE-2025-46282
Média · 5.5
CWE-284 17/12/2025
Improper Access Control em Apple Safari
The issue was addressed with additional permissions checks. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. An app may be able to access sensitive user data.
CVE-2025-46281
Alta · 8.8
CWE-693 17/12/2025
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia…
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to break out of its sandbox.
CVE-2025-46278
Média · 5.5
CWE-200 17/12/2025
Exposure of Sensitive Information em Apple Macos
The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected user data.
CVE-2025-46277
Baixa · 3.3
CWE-532 17/12/2025
Insertion of Sensitive Information into Log File em Apple Ipados
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, watchOS 26.2. An app may be able to access a user’s Safari history.
CVE-2025-46279
Baixa · 3.3
CWE-200 17/12/2025
Exposure of Sensitive Information em Apple Ipados
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to identify what other apps a user has installed.
CVE-2025-43536
Média · 4.3
CWE-416 17/12/2025
Use After Free em Apple Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43541
Média · 4.3
CWE-843 17/12/2025
Type Confusion em Apple Safari
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43535
Média · 4.3
17/12/2025
The issue was addressed with improved memory handling. This issue is fixed in Safari…
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43533
Média · 5.7
CWE-20 17/12/2025
Improper Input Validation em Apple Ipados
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.
CVE-2025-43526
Crítica · 9.8
CWE-601 17/12/2025
Open Redirect em Apple Safari
This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted.
CVE-2025-43531
Baixa · 3.1
CWE-362 17/12/2025
Race Condition em Apple Safari
A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43529
Alta · 8.8
KEV Alta · 61 Exploit público CWE-416 17/12/2025
Apple Multiple Products Use-After-Free WebKit Vulnerability
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.
CVE-2025-43514
Média · 5.5
CWE-200 17/12/2025
Exposure of Sensitive Information em Apple Macos
The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected user data.
CVE-2025-43501
Média · 4.3
CWE-787 17/12/2025
Out-of-bounds Write em Apple Safari
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43475
Média · 5.5
CWE-532 17/12/2025
Insertion of Sensitive Information into Log File em Apple Ipados
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2. An app may be able to access user-sensitive data.
CVE-2025-43428
Crítica · 9.8
CWE-306 17/12/2025
Missing Authentication for Critical Function em Apple Ipados
A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Photos in the Hidden Photos Album may be viewed without authentication.
CVE-2025-46289
Média · 5.5
CWE-285 12/12/2025
Improper Authorization em Apple Macos
A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data.