Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior
Críticas / altas1294▼ 234 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
1654 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.3) | 0.55% | — | Apple SafariApple IpadosApple Iphone OSApple Tvos+1 | 4/11/2025 | 17/6/2026 | This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash. | |
| Modificada | Media (4.3) | 0.71% | — | Apple SafariApple IpadosApple Iphone OSApple Tvos+2 | 4/11/2025 | 17/6/2026 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash. | |
| Modificada | Media (4.3) | 0.65% | — | Apple SafariApple IpadosApple Iphone OSApple Visionos | 4/11/2025 | 17/6/2026 | Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash. | |
| Modificada | Alta (8.8) | 0.40% | — | Apple SafariApple IpadosApple Iphone OSApple Tvos+2 | 4/11/2025 | 17/6/2026 | The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to memory corruption. | |
| Modificada | Alta (7.5) | 0.62% | — | Apple SafariApple IpadosApple Iphone OSApple Macos+2 | 4/11/2025 | 17/6/2026 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A sandboxed app may be able to observe system-wide network connections. | |
| Modificada | Alta (7.8) | 0.20% | 💥 PoC | Apple IpadosApple Iphone OSApple MacosApple Tvos+1 | 4/11/2025 | 17/6/2026 | This issue was addressed with improved entitlements. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. An app may be able to break out of its sandbox. | |
| Modificada | Media (5.5) | 0.20% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 4/11/2025 | 17/6/2026 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination. | |
| Modificada | Media (4.3) | 0.50% | — | Apple SafariApple IpadosApple Iphone OSApple Tvos+2 | 4/11/2025 | 17/6/2026 | The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin. | |
| Modificada | Media (5.5) | 0.21% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 4/11/2025 | 17/6/2026 | This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to access protected user data. | |
| Modificada | Alta (7.5) | 0.82% | — | Apple SafariApple IpadosApple Iphone OSApple Visionos+1 | 4/11/2025 | 17/6/2026 | A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.7.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on. | |
| Modificada | Alta (7.8) | 0.21% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 4/11/2025 | 17/6/2026 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A malicious app may be able to read kernel memory. | |
| Modificada | Media (5.5) | 0.16% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 4/11/2025 | 17/6/2026 | A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data. | |
| Modificada | Alta (8.1) | 0.40% | — | Apple IpadosApple Iphone OSApple TvosApple Visionos+1 | 4/11/2025 | 17/6/2026 | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to fingerprint the user. | |
| Modificada | Media (6.5) | 0.38% | — | Apple IpadosApple Iphone OSApple VisionosApple Watchos | 4/11/2025 | 25/9/2026 | A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user. | |
| Modificada | Media (4.3) | 0.42% | — | Apple SafariApple IpadosApple Iphone OSApple Visionos+1 | 4/11/2025 | 25/9/2026 | An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Visiting a malicious website may lead to user interface spoofing. | |
| Modificada | Media (4.3) | 0.39% | — | Apple SafariApple IpadosApple Iphone OSApple Visionos | 4/11/2025 | 25/9/2026 | The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing. | |
| Modificada | Media (4.3) | 0.61% | — | Apple SafariApple IpadosApple Iphone OSApple Tvos+2 | 4/11/2025 | 25/9/2026 | This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash. | |
| Modificada | Media (6.3) | 0.32% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 4/11/2025 | 25/9/2026 | This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to break out of its sandbox. | |
| Modificada | Media (4.3) | 1.1% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 4/11/2025 | 25/9/2026 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing a maliciously crafted media file may lead to unexpected app… | |
| Modificada | Media (5.3) | 0.54% | — | Apple IpadosApple Iphone OSApple TvosApple Visionos+1 | 4/11/2025 | 25/9/2026 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user. | |
| Modificada | Media (4.3) | 0.72% | — | Apple SafariApple IpadosApple Iphone OSApple Tvos+2 | 4/11/2025 | 25/9/2026 | This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash. | |
| Modificada | Media (4.3) | 1.1% | — | Apple SafariApple IpadosApple Iphone OSApple Visionos+1 | 4/11/2025 | 25/9/2026 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash. | |
| Modificada | Media (4.3) | 1.3% | — | Apple SafariApple IpadosApple Iphone OSApple Visionos+1 | 4/11/2025 | 25/9/2026 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash. | |
| Modificada | Media (4.3) | 1.5% | — | Apple SafariApple IpadosApple Iphone OSApple Tvos+2 | 4/11/2025 | 25/9/2026 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash. | |
| Modificada | Baja (2) | 0.25% | — | Apple IpadosApple Iphone OSApple MacosApple Visionos | 4/11/2025 | 25/9/2026 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1. An attacker with physical access to an unlocked device paired with a Mac may be able to view sensitive user information in… |