Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior
Críticas / altas1294▼ 196 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior
600 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (6.2) | 0.20% | 💥 PoC | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 25/3/2026 | 17/6/2026 | This issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to leak sensitive kernel state. | |
| Analizada | Alta (7.5) | 0.77% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 25/3/2026 | 17/6/2026 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker in a privileged network position may be able to intercept… | |
| Analizada | Baja (3.3) | 0.14% | — | Apple IpadosApple Iphone OSApple MacosApple Visionos+1 | 25/3/2026 | 17/6/2026 | This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A local attacker may gain access to user's Keychain items. | |
| Modificada | Media (6.5) | 0.38% | — | Apple IpadosApple Iphone OSApple TvosApple Visionos+1 | 25/3/2026 | 17/6/2026 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to fingerprint the user. | |
| Modificada | Media (4.3) | 0.20% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+1 | 25/3/2026 | 15/7/2026 | A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. A malicious website may be able to access script message handlers intended for other origins. | |
| Modificada | Media (4.3) | 0.56% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+3 | 25/3/2026 | 15/7/2026 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A malicious website may be able to process restricted web content outside the sandbox. | |
| Modificada | Media (6.5) | 0.51% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+1 | 25/3/2026 | 15/7/2026 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash. | |
| Analizada | Media (4.6) | 0.25% | — | Apple IpadosApple Iphone OSApple VisionosApple Watchos | 25/3/2026 | 17/6/2026 | The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.4, visionOS 26.4, watchOS 26.4. An attacker with physical access to a locked device may be able to view sensitive user information. | |
| Analizada | Media (5.5) | 0.17% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 25/3/2026 | 17/6/2026 | A stack overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to cause a denial-of-service. | |
| Modificada | Media (6.2) | 0.17% | — | Apple IpadosApple Iphone OSApple MacosApple Visionos | 25/3/2026 | 17/6/2026 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. An app may be able to enumerate a user's installed apps. | |
| Analizada | Media (6.2) | 0.18% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 25/3/2026 | 17/6/2026 | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker may be able to cause unexpected app termination. | |
| Modificada | Alta (7.8) | 0.33% | 💥 PoC | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 25/3/2026 | 17/6/2026 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or corrupt kernel memory. | |
| Analizada | Media (4.3) | 0.28% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 25/3/2026 | 17/6/2026 | An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A maliciously crafted webpage may be able to fingerprint the user. | |
| Analizada | Media (6.5) | 0.72% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 25/3/2026 | 17/6/2026 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing an audio stream in a maliciously crafted media file… | |
| Analizada | Crítica (9.3) | 0.27% | — | Apple IpadosApple Iphone OSApple MacosApple Visionos | 25/3/2026 | 17/6/2026 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to break out of its sandbox. | |
| Analizada | Media (5.5) | 0.18% | — | Apple IpadosApple Iphone OSApple MacosApple Visionos | 25/3/2026 | 17/6/2026 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, visionOS 26.3. An app may be able to access sensitive user data. | |
| Analizada | Media (6.5) | 0.61% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+3 | 25/3/2026 | 17/6/2026 | This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced. | |
| Modificada | Media (4.3) | 0.72% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+1 | 25/3/2026 | 15/7/2026 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash. | |
| Analizada | Media (6.2) | 0.20% | 💥 PoC | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 25/3/2026 | 17/6/2026 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to cause unexpected system termination. | |
| Analizada | Alta (7.8) | 1.4% | ⚠ Explotación activa💥 PoC | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 11/2/2026 | 17/6/2026 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been… | |
| Modificada | Crítica (9) | 0.29% | — | Apple IpadosApple Iphone OSApple MacosApple Visionos | 11/2/2026 | 21/8/2026 | A race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. A shortcut may be able to bypass sandbox restrictions. | |
| Modificada | Media (5.3) | 0.24% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+1 | 11/2/2026 | 17/6/2026 | This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A website may be able to track users through Safari web extensions. | |
| Modificada | Media (5.5) | 0.27% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 11/2/2026 | 17/6/2026 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted image may lead to disclosure of user information. | |
| Modificada | Baja (3.1) | 0.34% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 11/2/2026 | 17/6/2026 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker in a privileged network position may be able to intercept network traffic. | |
| Modificada | Alta (7.5) | 0.81% | 💥 PoC | Apple SafariApple IpadosApple Iphone OSApple Macos+1 | 11/2/2026 | 17/6/2026 | A path handling issue was addressed with improved logic. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. A remote user may be able to write arbitrary files. |