Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior
Críticas / altas1273▼ 220 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior
1671 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.8) | 3.2% | ⚠ Explotación activa | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 14/8/2023 | 17/6/2026 | The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution. | |
| Modificada | Media (6.5) | 1.0% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 28/7/2023 | 17/6/2026 | A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A website may be able to track sensitive user information. | |
| Modificada | Media (6.1) | 0.58% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 28/7/2023 | 17/6/2026 | This issue was addressed with improved checks. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. Processing a document may lead to a cross site scripting attack. | |
| Modificada | Alta (8.8) | 1.3% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 27/7/2023 | 17/6/2026 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution. | |
| Modificada | Alta (8.8) | 1.4% | 💥 PoC | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 27/7/2023 | 17/6/2026 | The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution. | |
| Modificada | Alta (8.8) | 1.3% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 27/7/2023 | 17/6/2026 | The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution. | |
| Modificada | Alta (7.5) | 1.2% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 27/7/2023 | 17/6/2026 | The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. A website may be able to bypass Same Origin Policy. | |
| Modificada | Alta (8.8) | 1.2% | — | Apple SafariApple IpadosApple Iphone OSApple Macos | 27/7/2023 | 17/6/2026 | The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, Safari 16.6. Processing web content may lead to arbitrary code execution. | |
| Modificada | Alta (8.8) | 1.2% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 27/7/2023 | 17/6/2026 | The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution. | |
| Modificada | Media (6.5) | 1.0% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 27/7/2023 | 17/6/2026 | The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may disclose sensitive information. | |
| Analizada | Alta (8.8) | 19% | ⚠ Explotación activa | Apple SafariApple IpadosApple Iphone OSApple Macos+3 | 27/7/2023 | 17/6/2026 | The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. | |
| Analizada | Alta (8.8) | 24% | ⚠ Explotación activa | Apple SafariApple IpadosApple Iphone OSApple Macos+1 | 23/6/2023 | 17/6/2026 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been… | |
| Analizada | Alta (8.8) | 23% | ⚠ Explotación activa | Apple SafariApple IpadosApple Iphone OSApple Macos | 23/6/2023 | 17/6/2026 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively… | |
| Analizada | Media (6.5) | 0.79% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 23/6/2023 | 17/6/2026 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. | |
| Analizada | Alta (8.6) | 17% | ⚠ Explotación activa | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 23/6/2023 | 17/6/2026 | The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been… | |
| Modificada | Media (6.5) | 0.72% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 23/6/2023 | 17/6/2026 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. | |
| Analizada | Alta (8.8) | 12% | ⚠ Explotación activa | Apple SafariApple IpadosApple Iphone OSApple Macos+4 | 23/6/2023 | 17/6/2026 | A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that… | |
| Analizada | Media (6.5) | 14% | ⚠ Explotación activa | Apple SafariApple IpadosApple Iphone OSApple Macos+3 | 23/6/2023 | 17/6/2026 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been… | |
| Modificada | Crítica (9.8) | 1.2% | — | Apple SafariApple IpadosApple Iphone OSApple Macos | 8/5/2023 | 17/6/2026 | This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution. | |
| Modificada | Media (6.5) | 0.93% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+3 | 8/5/2023 | 17/6/2026 | The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information. | |
| Modificada | Media (5.5) | 0.20% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+3 | 8/5/2023 | 17/6/2026 | This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy. | |
| Modificada | Alta (8.8) | 0.81% | — | Apple SafariApple IpadosApple Iphone OSApple Macos | 8/5/2023 | 17/6/2026 | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution | |
| Analizada | Alta (8.8) | 27% | ⚠ Explotación activa💥 PoC | Apple SafariApple IpadosApple Iphone OSApple Macos | 10/4/2023 | 17/6/2026 | A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may… | |
| Analizada | Alta (8.8) | 9.5% | ⚠ Explotación activa | Apple SafariApple IpadosApple Iphone OSApple Macos | 27/2/2023 | 17/6/2026 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been… | |
| Modificada | Alta (8.8) | 0.90% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 27/2/2023 | 17/6/2026 | The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. |