CVE Intelligence

Vulnerabilidades de Apple

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Apple: 709 registro(s), com severidade, exploração e correções.

Macos 604Iphone Os 409Ipados 389iOS and iPadOS 372Watchos 238Visionos 232Tvos 210Safari 132Mac Os X 57iOS 18Xcode 9Icloud 6Itunes 5Swiftnio Http/2 2iOS-1 2Container 2macOS Monterey 2Mac Os X Server 1Os X Server 1macOS Tahoe 1macOS Sonoma 1macOS Sequoia 1Private Cloud Compute Server Software 1Pages 1Keynote 1Containerization 1Compressor 1Private Cloud Compute 1Swift-crypto 1watchOS-1 1Safari (v and ) 1iCloud for Windows 1iTunes for Windows 1

Somente exploradas (KEV) →

CVE-2026-28963 Média · 4.6 CWE-359 11/05/2026
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in…
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to use Visual Intelligence to access sensitive user data during iPhone Mirroring.
CVE-2026-28962 Alta · 7.5 CWE-200 11/05/2026
Exposure of Sensitive Information em Apple Ipados
This issue was addressed with improved access restrictions. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. Processing maliciously crafted web content may disclose sensitive user information.
CVE-2026-28961 Média · 4.6 CWE-522 11/05/2026
Insufficiently Protected Credentials em Apple Macos
This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. An attacker with physical access to a locked device may be able to view sensitive user information.
CVE-2026-28959 Alta · 7.5 CWE-120 11/05/2026
Classic Buffer Overflow em Apple Ipados
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.
CVE-2026-28958 Média · 5.5 CWE-200 11/05/2026
Exposure of Sensitive Information em Apple Ipados
This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.
CVE-2026-28957 Baixa · 3.3 CWE-284 11/05/2026
Improper Access Control em Apple Ipados
An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to capture a user's screen.
CVE-2026-28956 Média · 6.5 CWE-125 11/05/2026
Out-of-bounds Read em Apple Ipados
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
CVE-2026-28955 Alta · 8.8 CWE-119 11/05/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28954 Alta · 7.5 CWE-290 11/05/2026
Authentication Bypass by Spoofing em Apple Ipados
A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A maliciously crafted disk image may bypass Gatekeeper checks.
CVE-2026-28953 Alta · 7.5 CWE-119 11/05/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28952 Alta · 7.5 CWE-190 11/05/2026
Integer Overflow or Wraparound em Apple Ipados
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to cause unexpected system termination.
CVE-2026-28951 Alta · 7.8 CWE-863 11/05/2026
Incorrect Authorization em Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to gain root privileges.
CVE-2026-28947 Alta · 8.8 CWE-416 11/05/2026
Use After Free em Apple Ipados
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-28946 Média · 6.5 CWE-416 11/05/2026
Use After Free em Apple Macos
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-28944 Alta · 7.5 CWE-119 11/05/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28943 Alta · 7.5 CWE-532 11/05/2026
Insertion of Sensitive Information into Log File em Apple Ipados
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to determine kernel memory layout.
CVE-2026-28942 Média · 6.5 CWE-416 11/05/2026
Use After Free em Apple Ipados
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-28941 Alta · 7.1 CWE-119 11/05/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Tahoe 26.5. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.
CVE-2026-28940 Alta · 8.8 CWE-119 11/05/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing a maliciously crafted image may corrupt process memory.
CVE-2026-28936 Alta · 7.5 CWE-20 11/05/2026
Improper Input Validation em Apple Ipados
The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Sonoma 14.8.8, macOS Tahoe 26.5, visionOS 26.5. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-28930 Alta · 7.5 CWE-284 11/05/2026
Improper Access Control em Apple Macos
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.5. An app may be able to access protected user data.
CVE-2026-28929 Alta · 7.5 CWE-1254 11/05/2026
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and…
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. Replying to an email could display remote images in Mail in Lockdown Mode.
CVE-2026-28925 Alta · 7.5 CWE-120 11/05/2026
Classic Buffer Overflow em Apple Macos
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-28924 Alta · 7.5 CWE-362 11/05/2026
Race Condition em Apple Macos
A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to access Contacts without user consent.
CVE-2026-28923 Alta · 8.8 CWE-532 11/05/2026
Insertion of Sensitive Information into Log File em Apple Macos
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A malicious app may be able to break out of its sandbox.