Filtered by vendor Apple
Subscribe
Total
15947 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-112423 | 1 Apple | 4 Ipados, Iphone Os, Macos and 1 more | 2026-11-03 | N/A | 6.1 MEDIUM |
| An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents. | |||||
| CVE-2025-6965 | 3 Apple, Siemens, Sqlite | 9 Ipados, Iphone Os, Macos and 6 more | 2026-11-03 | N/A | 7.7 HIGH |
| There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. | |||||
| CVE-2026-65385 | 1 Apple | 4 Ipados, Iphone Os, Visionos and 1 more | 2026-11-03 | N/A | 7.8 HIGH |
| An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, watchOS 27.2. A buffer overflow may result in memory corruption and unexpected app termination. | |||||
| CVE-2026-118335 | 2 Apple, Google | 2 Macos, Chrome | 2026-11-03 | N/A | 8.8 HIGH |
| Out of bounds write in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High) | |||||
| CVE-2026-118329 | 2 Apple, Google | 2 Macos, Chrome | 2026-11-03 | N/A | 8.8 HIGH |
| Uninitialized resource in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-113949 | 1 Apple | 5 Ipados, Iphone Os, Macos and 2 more | 2026-11-03 | N/A | 8.8 HIGH |
| A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption. | |||||
| CVE-2026-113329 | 2 Apple, Google | 2 Macos, Chrome | 2026-11-03 | N/A | 6.5 MEDIUM |
| Race condition in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium) | |||||
| CVE-2026-113325 | 2 Apple, Google | 2 Iphone Os, Chrome | 2026-11-03 | N/A | 6.5 MEDIUM |
| Missing authorization in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-113323 | 2 Apple, Google | 2 Iphone Os, Chrome | 2026-11-03 | N/A | 8.8 HIGH |
| UI misrepresentation in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) | |||||
| CVE-2026-113320 | 2 Apple, Google | 2 Iphone Os, Chrome | 2026-11-03 | N/A | 8.8 HIGH |
| UI misrepresentation in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-113317 | 2 Apple, Google | 2 Macos, Chrome | 2026-11-03 | N/A | 8.8 HIGH |
| Use after free in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-113312 | 2 Apple, Google | 2 Macos, Chrome | 2026-11-03 | N/A | 8.8 HIGH |
| UI misrepresentation in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) | |||||
| CVE-2026-113282 | 2 Apple, Google | 2 Macos, Chrome | 2026-11-03 | N/A | 8.8 HIGH |
| Race condition in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-113268 | 2 Apple, Google | 2 Iphone Os, Chrome | 2026-11-03 | N/A | 8.8 HIGH |
| Information leak in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low) | |||||
| CVE-2026-113249 | 2 Apple, Google | 2 Iphone Os, Chrome | 2026-11-03 | N/A | 8.8 HIGH |
| Missing authorization in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-113246 | 2 Apple, Google | 2 Iphone Os, Chrome | 2026-11-03 | N/A | 6.5 MEDIUM |
| Missing authorization in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-113236 | 2 Apple, Google | 2 Iphone Os, Chrome | 2026-11-03 | N/A | 8.8 HIGH |
| Improper input validation in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-113209 | 2 Apple, Google | 2 Iphone Os, Chrome | 2026-11-03 | N/A | 6.5 MEDIUM |
| Incorrect authorization in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-113196 | 2 Apple, Google | 2 Iphone Os, Chrome | 2026-11-03 | N/A | 6.5 MEDIUM |
| Race condition in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-113191 | 2 Apple, Google | 2 Macos, Chrome | 2026-11-03 | N/A | 8.8 HIGH |
| UI misrepresentation in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) | |||||