Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

52 862
matching records · page 612 of 2115
CVE-2026-86962 MEDIUM CVSS 5.53.1

A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.

Published: 20 Oct 2026 Updated: 09 Nov 2026 View details →
CVE-2026-86961 HIGH CVSS 7.83.1

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.

Published: 20 Oct 2026 Updated: 02 Nov 2026 View details →
CVE-2026-86959 MEDIUM CVSS 4.33.1

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to unexpected process termination.

Published: 20 Oct 2026 Updated: 09 Nov 2026 View details →
CVE-2026-86957 MEDIUM CVSS 6.53.1

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.

Published: 20 Oct 2026 Updated: 09 Nov 2026 View details →
CVE-2026-86955 MEDIUM CVSS 5.53.1

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.

Published: 20 Oct 2026 Updated: 03 Nov 2026 View details →
CVE-2026-86953 MEDIUM CVSS 4.63.1

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.

Published: 20 Oct 2026 Updated: 09 Nov 2026 View details →
CVE-2026-86949 HIGH CVSS 8.83.1

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox.

Published: 20 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-86948 HIGH CVSS 8.83.1

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.

Published: 20 Oct 2026 Updated: 30 Oct 2026 View details →
CVE-2026-86944 MEDIUM CVSS 5.53.1

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

Published: 20 Oct 2026 Updated: 09 Nov 2026 View details →
CVE-2026-86940 MEDIUM CVSS 5.53.1

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.

Published: 20 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-86935 MEDIUM CVSS 5.53.1

This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data.

Published: 20 Oct 2026 Updated: 30 Oct 2026 View details →
CVE-2026-86933 LOW CVSS 3.33.1

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.

Published: 20 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-86932 MEDIUM CVSS 5.53.1

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.

Published: 20 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-86928 MEDIUM CVSS 5.53.1

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.

Published: 20 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-86922 HIGH CVSS 8.83.1

A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.

Published: 20 Oct 2026 Updated: 09 Nov 2026 View details →
CVE-2026-86921 MEDIUM CVSS 6.23.1

A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.

Published: 20 Oct 2026 Updated: 09 Nov 2026 View details →
CVE-2026-86919 HIGH CVSS 8.83.1

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.

Published: 20 Oct 2026 Updated: 09 Nov 2026 View details →
CVE-2026-86918 MEDIUM CVSS 4.33.1

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.

Published: 20 Oct 2026 Updated: 09 Nov 2026 View details →
CVE-2026-86915 MEDIUM CVSS 4.73.1

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.

Published: 20 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-86914 MEDIUM CVSS 5.53.1

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive network connection information.

Published: 20 Oct 2026 Updated: 03 Nov 2026 View details →
CVE-2026-86913 MEDIUM CVSS 5.43.1

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

Published: 20 Oct 2026 Updated: 09 Nov 2026 View details →
CVE-2026-86907 MEDIUM CVSS 4.43.1

An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.

Published: 20 Oct 2026 Updated: 03 Nov 2026 View details →
CVE-2026-86875 MEDIUM CVSS 4.33.1

An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination.

Published: 20 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-86874 LOW CVSS 3.33.1

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination.

Published: 20 Oct 2026 Updated: 29 Oct 2026 View details →
CVE-2026-86872 MEDIUM CVSS 5.43.1

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.

Published: 20 Oct 2026 Updated: 09 Nov 2026 View details →