Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior

Críticas / altas1294▼ 196 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior

1928 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-43447	Modificada	Media (5.5)	0.19%	—	Apple Ipados Apple Iphone OS Apple Visionos Apple Watchos	4/11/2025	17/6/2026	The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2025-43440	Modificada	Media (6.5)	0.51%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Tvos+2	4/11/2025	17/6/2026	This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43436	Modificada	Alta (7.5)	0.58%	—	Apple Ipados Apple Iphone OS Apple Tvos Apple Visionos+1	4/11/2025	17/6/2026	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to enumerate a user's installed apps.
CVE-2025-43435	Modificada	Media (4.3)	0.75%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Tvos+2	4/11/2025	17/6/2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43433	Modificada	Alta (8.8)	1.2%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Tvos+2	4/11/2025	14/8/2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption.
CVE-2025-43432	Modificada	Media (4.3)	0.84%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Tvos+2	4/11/2025	17/6/2026	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43431	Modificada	Alta (8.8)	0.85%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Tvos+2	4/11/2025	17/6/2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption.
CVE-2025-43430	Modificada	Media (4.3)	1.1%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Tvos+2	4/11/2025	17/6/2026	This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43425	Modificada	Media (4.3)	0.71%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Tvos+2	4/11/2025	17/6/2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43419	Modificada	Alta (8.8)	0.40%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Tvos+2	4/11/2025	17/6/2026	The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to memory corruption.
CVE-2025-43413	Modificada	Alta (7.5)	0.62%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Macos+2	4/11/2025	17/6/2026	An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A sandboxed app may be able to observe system-wide network connections.
CVE-2025-43398	Modificada	Media (5.5)	0.20%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	4/11/2025	17/6/2026	The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination.
CVE-2025-43392	Modificada	Media (4.3)	0.50%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Tvos+2	4/11/2025	17/6/2026	The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin.
CVE-2025-43379	Modificada	Media (5.5)	0.21%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	4/11/2025	17/6/2026	This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to access protected user data.
CVE-2025-43376	Modificada	Alta (7.5)	0.82%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Visionos+1	4/11/2025	17/6/2026	A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.7.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on.
CVE-2025-43361	Modificada	Alta (7.8)	0.21%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	4/11/2025	17/6/2026	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A malicious app may be able to read kernel memory.
CVE-2025-43345	Modificada	Media (5.5)	0.16%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	4/11/2025	17/6/2026	A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.
CVE-2025-43323	Modificada	Alta (8.1)	0.40%	—	Apple Ipados Apple Iphone OS Apple Tvos Apple Visionos+1	4/11/2025	17/6/2026	This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to fingerprint the user.
CVE-2025-43507	Modificada	Media (6.5)	0.38%	—	Apple Ipados Apple Iphone OS Apple Visionos Apple Watchos	4/11/2025	25/9/2026	A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user.
CVE-2025-43503	Modificada	Media (4.3)	0.42%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Visionos+1	4/11/2025	25/9/2026	An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Visiting a malicious website may lead to user interface spoofing.
CVE-2025-43458	Modificada	Media (4.3)	0.61%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Tvos+2	4/11/2025	25/9/2026	This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2025-43448	Modificada	Media (6.3)	0.32%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	4/11/2025	25/9/2026	This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to break out of its sandbox.
CVE-2025-43445	Modificada	Media (4.3)	1.1%	—	Apple Ipados Apple Iphone OS Apple Macos Apple Tvos+2	4/11/2025	25/9/2026	An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing a maliciously crafted media file may lead to unexpected app…
CVE-2025-43444	Modificada	Media (5.3)	0.54%	—	Apple Ipados Apple Iphone OS Apple Tvos Apple Visionos+1	4/11/2025	25/9/2026	A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user.
CVE-2025-43443	Modificada	Media (4.3)	0.72%	—	Apple Safari Apple Ipados Apple Iphone OS Apple Tvos+2	4/11/2025	25/9/2026	This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.