CVE-2026-28876
- EPSS 0.06%
- Veröffentlicht 25.03.2026 00:32:08
- Zuletzt bearbeitet 25.03.2026 21:30:03
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4....
CVE-2026-28861
- EPSS 0.04%
- Veröffentlicht 25.03.2026 00:32:03
- Zuletzt bearbeitet 10.05.2026 14:16:48
A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. A malicious website may be able to access script message handlers...
CVE-2026-20694
- EPSS 0.01%
- Veröffentlicht 25.03.2026 00:32:02
- Zuletzt bearbeitet 26.03.2026 20:16:09
This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able...
CVE-2026-28877
- EPSS 0.01%
- Veröffentlicht 25.03.2026 00:32:00
- Zuletzt bearbeitet 11.05.2026 21:18:52
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. An app may b...
CVE-2026-20657
- EPSS 0.09%
- Veröffentlicht 25.03.2026 00:31:59
- Zuletzt bearbeitet 11.05.2026 21:18:50
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. Parsing a maliciously craf...
CVE-2026-20698
- EPSS 0.01%
- Veröffentlicht 25.03.2026 00:31:57
- Zuletzt bearbeitet 26.03.2026 20:16:09
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or corrupt kernel memory.
- EPSS 0.02%
- Veröffentlicht 25.03.2026 00:31:56
- Zuletzt bearbeitet 11.05.2026 21:18:52
This issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to enumerate a user's installed apps.
CVE-2026-28894
- EPSS 0.2%
- Veröffentlicht 25.03.2026 00:31:55
- Zuletzt bearbeitet 25.03.2026 17:59:30
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A remote attacker may be able to cause a denial-of-service.
CVE-2026-28857
- EPSS 0.04%
- Veröffentlicht 25.03.2026 00:31:54
- Zuletzt bearbeitet 26.03.2026 18:25:21
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28870
- EPSS 0.01%
- Veröffentlicht 25.03.2026 00:31:50
- Zuletzt bearbeitet 11.05.2026 21:18:51
An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to access sensitive user data...