Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2741▼ 485 respecto a la semana anterior

Críticas / altas1305▼ 185 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior

600 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-20654	Modificada	Media (5.5)	0.14%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	11/2/2026	17/6/2026	The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to cause unexpected system termination.
CVE-2026-20653	Modificada	Media (5.5)	0.16%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Visionos	11/2/2026	17/6/2026	A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. An app may be able to access sensitive user data.
CVE-2026-20652	Modificada	Alta (7.5)	0.63%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Macos+1	11/2/2026	15/7/2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A remote attacker may be able to cause a denial-of-service.
CVE-2026-20650	Modificada	Alta (7.5)	0.50%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	11/2/2026	17/6/2026	A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Bluetooth packets.
CVE-2026-20644	Modificada	Media (6.5)	0.31%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Macos+1	11/2/2026	15/7/2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-20641	Modificada	Alta (7.1)	0.14%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	11/2/2026	17/6/2026	A privacy issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to identify what other apps a user has installed.
CVE-2026-20636	Modificada	Media (6.5)	0.40%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Macos+1	11/2/2026	15/7/2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-20635	Modificada	Media (4.3)	0.31%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Macos+3	11/2/2026	15/7/2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-20634	Modificada	Media (5.5)	0.25%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	11/2/2026	17/6/2026	The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted image may result in disclosure of process memory.
CVE-2026-20628	Modificada	Alta (7.1)	0.12%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	11/2/2026	17/6/2026	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to break out of its sandbox.
CVE-2026-20627	Modificada	Media (5.5)	0.15%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Visionos+1	11/2/2026	21/8/2026	An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3, watchOS 26.3. An app may be able to access sensitive user data.
CVE-2026-20626	Modificada	Alta (7.8)	0.13%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Visionos	11/2/2026	17/6/2026	This issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Tahoe 26.3, visionOS 26.3. A malicious app may be able to gain root privileges.
CVE-2026-20625	Modificada	Media (5.5)	0.22%	—	Apple Macos Apple Visionos	11/2/2026	17/6/2026	A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. An app may be able to access sensitive user data.
CVE-2026-20617	Modificada	Alta (7)	0.11%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	11/2/2026	21/8/2026	A race condition was addressed with improved state handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to gain root privileges.
CVE-2026-20616	Modificada	Alta (8.8)	0.57%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Visionos	11/2/2026	17/6/2026	An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. Processing a maliciously crafted USD file may lead to unexpected app termination.
CVE-2026-20615	Modificada	Alta (7.8)	0.17%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Visionos	11/2/2026	21/8/2026	A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. An app may be able to gain root privileges.
CVE-2026-20611	Modificada	Alta (7.8)	0.27%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	11/2/2026	17/6/2026	An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted media file may lead to…
CVE-2026-20609	Modificada	Media (4.4)	0.13%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	11/2/2026	17/6/2026	The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted file may lead to a denial-of-service or potentially…
CVE-2026-20608	Modificada	Media (5.5)	0.24%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Macos+1	11/2/2026	15/7/2026	This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-46299	Modificada	Media (4.3)	0.30%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Macos+3	9/1/2026	17/6/2026	A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may disclose internal states of the app.
CVE-2025-46298	Modificada	Media (6.5)	0.39%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Macos+3	9/1/2026	17/6/2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43428	Modificada	Crítica (9.8)	0.71%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Visionos	17/12/2025	17/6/2026	A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Photos in the Hidden Photos Album may be viewed without authentication.
CVE-2025-46288	Modificada	Media (5.5)	0.17%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Visionos+1	17/12/2025	7/10/2026	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive payment tokens.
CVE-2025-46279	Modificada	Baja (3.3)	0.37%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	17/12/2025	7/10/2026	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to identify what other apps a user has installed.
CVE-2025-43541	Analizada	Media (4.3)	34%	💥 PoC	Apple Safari Apple Ipados Apple Iphone OS Apple Macos+1	17/12/2025	7/10/2026	A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.