Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2838▼ 146 respecto a la semana anterior
Críticas / altas1377▲ 68 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)255▼ 268 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 9.0% | — | Apple Iphone OSApple MAC OS XApple TV OSApple Watchos | 5/3/2019 | 17/6/2026 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution. | |
| Modificada | Alta (8.6) | 3.6% | — | Apple Iphone OSApple MAC OS XApple TV OSApple Watchos | 5/3/2019 | 17/6/2026 | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to break out of its sandbox. | |
| Modificada | Alta (7.8) | 5.4% | — | Apple Iphone OSApple MAC OS XApple TV OSApple Watchos | 5/3/2019 | 17/6/2026 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges. | |
| Modificada | Alta (7.8) | 1.5% | — | Apple Iphone OSApple MAC OS XApple TV OSApple Watchos | 5/3/2019 | 17/6/2026 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to execute arbitrary code with kernel privileges. | |
| Modificada | Media (5.5) | 3.7% | — | Apple Iphone OSApple MAC OS XApple TV OSApple Watchos | 5/3/2019 | 17/6/2026 | An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout. | |
| Modificada | Media (5.5) | 3.4% | — | Apple Iphone OSApple MAC OS XApple TV OS | 5/3/2019 | 17/6/2026 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes. | |
| Modificada | Crítica (10) | 2.1% | — | Apple ItunesApple Iphone OSApple MAC OS XApple TV OS+1 | 4/3/2019 | 17/6/2026 | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions. | |
| Modificada | Alta (7.5) | 2.2% | — | Netvios | 21/3/2007 | 16/6/2026 | SQL injection vulnerability in News/page.asp in NetVIOS Portal allows remote attackers to execute arbitrary SQL commands via the NewsID parameter. NOTE: this issue might be the same as CVE-2006-5954. | |
| Modificada | Alta (7.5) | 1.3% | — | Netvios | 17/11/2006 | 16/6/2026 | SQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsID parameter. |