Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2659▼ 692 respecto a la semana anterior
Críticas / altas1261▼ 300 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)250▼ 252 respecto a la semana anterior
926 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 1.5% | — | Apple SafariApple Iphone OSApple IcloudApple Itunes+1 | 20/2/2017 | 17/6/2026 | An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a… | |
| Modificada | Alta (8.8) | 1.6% | — | Apple ItunesApple Iphone OSApple SafariApple Tvos | 20/2/2017 | 17/6/2026 | An issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is affected. iTunes before 12.5.1 is affected. tvOS before 10 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and… | |
| Modificada | Alta (7.1) | 1.0% | — | Apple Iphone OSApple IcloudApple SafariApple Itunes | 20/2/2017 | 17/6/2026 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial… | |
| Modificada | Alta (8.8) | 1.8% | — | Apple Iphone OSApple SafariApple IcloudApple Itunes | 20/2/2017 | 17/6/2026 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory… | |
| Modificada | Media (6.5) | 1.1% | — | Apple SafariApple IcloudApple ItunesApple TV | 20/2/2017 | 17/6/2026 | An issue was discovered in certain Apple products. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a crafted web site. | |
| Modificada | Alta (8.8) | 1.9% | — | Apple ItunesApple Safari | 25/9/2016 | 17/6/2026 | WebKit in Apple iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. | |
| Modificada | Alta (8.8) | 2.1% | — | Apple SafariApple Iphone OSApple TvosApple Itunes | 25/9/2016 | 17/6/2026 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4766, and CVE-2016-4767. | |
| Modificada | Alta (8.8) | 2.1% | — | Apple SafariApple Iphone OSApple TvosApple Itunes | 25/9/2016 | 17/6/2026 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4766, and CVE-2016-4768. | |
| Modificada | Alta (8.8) | 2.1% | — | Apple SafariApple Iphone OSApple TvosApple Itunes | 25/9/2016 | 17/6/2026 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4767, and CVE-2016-4768. | |
| Modificada | Alta (8.8) | 2.1% | — | Apple SafariApple Iphone OSApple TvosApple Itunes | 25/9/2016 | 17/6/2026 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4766, CVE-2016-4767, and CVE-2016-4768. | |
| Modificada | Media (6.8) | 1.2% | — | Apple ItunesApple SafariApple Iphone OS | 25/9/2016 | 17/6/2026 | WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | |
| Modificada | Alta (8.8) | 2.2% | — | Apple SafariApple Iphone OSApple IcloudApple Itunes | 25/9/2016 | 17/6/2026 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. | |
| Modificada | Media (6.5) | 2.0% | — | Apple ItunesApple SafariApple Iphone OS | 25/9/2016 | 17/6/2026 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support. | |
| Modificada | Alta (8.8) | 2.1% | — | Apple SafariApple Iphone OSApple TvosApple Itunes | 25/9/2016 | 17/6/2026 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4765, CVE-2016-4766, CVE-2016-4767, and CVE-2016-4768. | |
| Modificada | Media (6.5) | 1.7% | — | Apple SafariApple Iphone OSApple Itunes | 25/9/2016 | 17/6/2026 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly restrict access to the location variable, which allows remote attackers to obtain sensitive information via a crafted web site. | |
| Modificada | Alta (8.8) | 2.4% | — | Apple SafariApple Iphone OSApple TvosApple Itunes | 25/9/2016 | 17/6/2026 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute arbitrary code via a crafted web site. | |
| Modificada | Crítica (9.8) | 3.2% | — | Apple Iphone OSApple MAC OS XApple TvosApple Watchos+2 | 22/7/2016 | 17/6/2026 | libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different… | |
| Modificada | Crítica (9.8) | 3.2% | — | Apple Iphone OSApple MAC OS XApple TvosApple Watchos+2 | 22/7/2016 | 17/6/2026 | libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different… | |
| Modificada | Crítica (9.8) | 3.4% | — | Apple IcloudApple ItunesApple Iphone OSApple MAC OS X+2 | 22/7/2016 | 17/6/2026 | libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different… | |
| Modificada | Crítica (9.8) | 5.0% | — | Xmlsoft LibxsltApple IcloudApple ItunesFedoraproject Fedora+1 | 22/7/2016 | 17/6/2026 | libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different… | |
| Modificada | Crítica (9.8) | 5.0% | — | Xmlsoft LibxsltApple Iphone OSApple MAC OS XApple Tvos+5 | 22/7/2016 | 17/6/2026 | libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different… | |
| Modificada | Crítica (9.8) | 4.9% | — | Xmlsoft LibxsltApple IcloudApple ItunesFedoraproject Fedora | 22/7/2016 | 17/6/2026 | libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different… | |
| Modificada | Crítica (9.8) | 5.0% | — | Xmlsoft LibxsltApple Iphone OSApple MAC OS XApple Tvos+4 | 22/7/2016 | 17/6/2026 | libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different… | |
| Modificada | Crítica (9.8) | 7.0% | — | HP Icewall Federation AgentApple WatchosApple MAC OS XXmlsoft Libxml2+15 | 9/6/2016 | 17/6/2026 | Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors. | |
| Modificada | Alta (7.5) | 14% | — | HP Icewall Federation AgentCanonical Ubuntu LinuxDebian LinuxOracle VM Server+7 | 9/6/2016 | 17/6/2026 | The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName. |