Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3006▼ 69 respecto a la semana anterior
Críticas / altas1420▲ 54 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.8) | 0.32% | — | Apple Garageband | 30/1/2025 | 17/6/2026 | The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a maliciously crafted image may lead to arbitrary code execution. | |
| Modificada | Alta (7.8) | 0.21% | — | Apple Garageband | 20/12/2024 | 17/6/2026 | This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges. | |
| Modificada | Alta (7.8) | 0.26% | — | Apple Garageband | 12/3/2024 | 17/6/2026 | A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. | |
| Modificada | Alta (7.8) | 1.1% | — | Apple GaragebandApple Logic PRO XApple Macos | 18/3/2022 | 17/6/2026 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. | |
| Modificada | Alta (7.8) | 1.1% | — | Apple GaragebandApple Logic PRO XApple Macos | 18/3/2022 | 17/6/2026 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. | |
| Modificada | Media (5.5) | 0.25% | — | Apple Garageband | 8/9/2021 | 17/6/2026 | This issue was addressed by removing additional entitlements. This issue is fixed in GarageBand 10.4.3. A local attacker may be able to read sensitive information. | |
| Modificada | Alta (7.8) | 1.5% | — | Apple Garageband | 20/2/2017 | 17/6/2026 | An issue was discovered in certain Apple products. GarageBand before 10.1.6 is affected. The issue involves the "Projects" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted GarageBand project file. | |
| Modificada | Alta (8.8) | 2.0% | — | Apple Logic PRO XApple Garageband | 20/2/2017 | 17/6/2026 | An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is affected. The issue involves the "Projects" component, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GarageBand project file. | |
| Modificada | Media (4.3) | 1.5% | — | Apple Garageband | 4/8/2009 | 16/6/2026 | Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users. |