Vulnerabilities (CVE)

Filtered by CWE-119
Total 14282 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-28901 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-15 N/A 4.3 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-28847 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-15 N/A 8.8 HIGH
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-20644 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-07-15 N/A 6.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-20636 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-07-15 N/A 6.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-20635 1 Apple 7 Ipados, Iphone Os, Macos and 4 more 2026-07-15 N/A 4.3 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-1260 1 Google 1 Sentencepiece 2026-07-15 N/A 7.8 HIGH
Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.
CVE-2026-12326 1 Mozilla 2 Firefox, Thunderbird 2026-07-15 N/A 8.1 HIGH
Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVE-2026-0891 1 Mozilla 2 Firefox, Thunderbird 2026-07-15 N/A 8.1 HIGH
Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0879 1 Mozilla 2 Firefox, Thunderbird 2026-07-15 N/A 9.8 CRITICAL
Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2026-0878 1 Mozilla 2 Firefox, Thunderbird 2026-07-15 N/A 8.0 HIGH
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
CVE-2025-43214 1 Apple 7 Ipados, Iphone Os, Macos and 4 more 2026-07-15 N/A 6.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43213 1 Apple 7 Ipados, Iphone Os, Macos and 4 more 2026-07-15 N/A 6.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-31277 4 Apple, Redhat, Webkitgtk and 1 more 15 Ipados, Iphone Os, Macos and 12 more 2026-07-15 N/A 8.8 HIGH
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
CVE-2025-31223 1 Apple 7 Ipados, Iphone Os, Macos and 4 more 2026-07-15 N/A 8.0 HIGH
The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.
CVE-2026-8391 1 Mozilla 1 Firefox 2026-07-15 N/A 5.3 MEDIUM
Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.
CVE-2026-8389 1 Mozilla 1 Firefox 2026-07-15 N/A 8.8 HIGH
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.
CVE-2026-8388 1 Mozilla 1 Firefox 2026-07-15 N/A 6.5 MEDIUM
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.
CVE-2026-8093 1 Mozilla 2 Firefox, Thunderbird 2026-07-15 N/A 8.1 HIGH
Memory safety bugs present in Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.2 and Thunderbird 150.0.2.
CVE-2026-7324 1 Mozilla 2 Firefox, Thunderbird 2026-07-15 N/A 7.3 HIGH
Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1 and Thunderbird 150.0.1.
CVE-2026-7323 1 Mozilla 2 Firefox, Thunderbird 2026-07-15 N/A 7.3 HIGH
Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.