Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2677▼ 656 respecto a la semana anterior
Críticas / altas1264▼ 294 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
2194 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.5) | 0.21% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 4/11/2025 | 17/6/2026 | This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to access protected user data. | |
| Modificada | Alta (7.5) | 0.82% | — | Apple SafariApple IpadosApple Iphone OSApple Visionos+1 | 4/11/2025 | 17/6/2026 | A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.7.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on. | |
| Modificada | Alta (7.8) | 0.21% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 4/11/2025 | 17/6/2026 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A malicious app may be able to read kernel memory. | |
| Modificada | Media (5.5) | 0.15% | — | Apple IpadosApple Iphone OS | 4/11/2025 | 17/6/2026 | The issue was addressed with improved UI. This issue is fixed in iOS 26 and iPadOS 26. Password fields may be unintentionally revealed. | |
| Modificada | Media (5.5) | 0.16% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 4/11/2025 | 17/6/2026 | A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data. | |
| Modificada | Alta (7.1) | 0.26% | — | Apple IpadosApple Iphone OSApple Macos | 4/11/2025 | 17/6/2026 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Sonoma 14.8.4, macOS Tahoe 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory. | |
| Modificada | Alta (8.1) | 0.40% | — | Apple IpadosApple Iphone OSApple TvosApple Visionos+1 | 4/11/2025 | 17/6/2026 | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to fingerprint the user. | |
| Modificada | Media (6.5) | 0.38% | — | Apple IpadosApple Iphone OSApple VisionosApple Watchos | 4/11/2025 | 25/9/2026 | A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user. | |
| Modificada | Media (4.3) | 0.42% | — | Apple SafariApple IpadosApple Iphone OSApple Visionos+1 | 4/11/2025 | 25/9/2026 | An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Visiting a malicious website may lead to user interface spoofing. | |
| Modificada | Media (4.3) | 0.39% | — | Apple SafariApple IpadosApple Iphone OSApple Visionos | 4/11/2025 | 25/9/2026 | The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing. | |
| Analizada | Media (4.6) | 0.25% | — | Apple IpadosApple Iphone OS | 4/11/2025 | 25/9/2026 | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a locked device may be able to view sensitive user information. | |
| Modificada | Media (4.3) | 0.61% | — | Apple SafariApple IpadosApple Iphone OSApple Tvos+2 | 4/11/2025 | 25/9/2026 | This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash. | |
| Modificada | Alta (7.5) | 0.46% | — | Apple IpadosApple Iphone OS | 4/11/2025 | 25/9/2026 | This issue was addressed through improved state management. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. A device may persistently fail to lock. | |
| Modificada | Media (4.6) | 0.24% | — | Apple IpadosApple Iphone OS | 4/11/2025 | 25/9/2026 | This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 26.1 and iPadOS 26.1. Keyboard suggestions may display sensitive information on the lock screen. | |
| Modificada | Alta (7.5) | 0.40% | — | Apple IpadosApple Iphone OS | 4/11/2025 | 25/9/2026 | A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to learn information about the current camera view before being granted camera access. | |
| Modificada | Media (6.3) | 0.32% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 4/11/2025 | 25/9/2026 | This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to break out of its sandbox. | |
| Modificada | Media (4.3) | 1.1% | — | Apple IpadosApple Iphone OSApple MacosApple Tvos+2 | 4/11/2025 | 25/9/2026 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing a maliciously crafted media file may lead to unexpected app… | |
| Modificada | Media (5.3) | 0.54% | — | Apple IpadosApple Iphone OSApple TvosApple Visionos+1 | 4/11/2025 | 25/9/2026 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user. | |
| Modificada | Media (4.3) | 0.72% | — | Apple SafariApple IpadosApple Iphone OSApple Tvos+2 | 4/11/2025 | 25/9/2026 | This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash. | |
| Modificada | Baja (3.3) | 0.18% | — | Apple IpadosApple Iphone OS | 4/11/2025 | 25/9/2026 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to identify what other apps a user has installed. | |
| Modificada | Media (5.5) | 0.20% | — | Apple IpadosApple Iphone OS | 4/11/2025 | 25/9/2026 | A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to fingerprint the user. | |
| Modificada | Media (4.3) | 1.1% | — | Apple SafariApple IpadosApple Iphone OSApple Visionos+1 | 4/11/2025 | 25/9/2026 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash. | |
| Modificada | Media (4.3) | 1.3% | — | Apple SafariApple IpadosApple Iphone OSApple Visionos+1 | 4/11/2025 | 25/9/2026 | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash. | |
| Modificada | Media (4.3) | 1.5% | — | Apple SafariApple IpadosApple Iphone OSApple Tvos+2 | 4/11/2025 | 25/9/2026 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash. | |
| Modificada | Media (5.5) | 0.27% | 💥 PoC | Apple IpadosApple Iphone OS | 4/11/2025 | 25/9/2026 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. An app may be able to access sensitive user data. |