Total
395540 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-65369 | 1 Apple | 1 Macos | 2026-09-17 | N/A | 5.5 MEDIUM |
| A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may bypass Gatekeeper checks. | |||||
| CVE-2026-84562 | 1 Apple | 1 Macos | 2026-09-17 | N/A | 4.7 MEDIUM |
| A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data. | |||||
| CVE-2026-84586 | 1 Apple | 2 Macos, Watchos | 2026-09-17 | N/A | 5.5 MEDIUM |
| An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, watchOS 27. A malicious application may be able to leak sensitive user information. | |||||
| CVE-2026-84593 | 1 Apple | 2 Ipados, Iphone Os | 2026-09-17 | N/A | 5.5 MEDIUM |
| A use after free issue was addressed with improved memory management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to cause unexpected system termination. | |||||
| CVE-2026-84603 | 1 Apple | 4 Ipados, Iphone Os, Visionos and 1 more | 2026-09-17 | N/A | 5.5 MEDIUM |
| A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data. | |||||
| CVE-2026-84606 | 1 Apple | 4 Ipados, Iphone Os, Macos and 1 more | 2026-09-17 | N/A | 7.5 HIGH |
| A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to identify a user across reinstalls. | |||||
| CVE-2026-69288 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-09-17 | N/A | 5.5 MEDIUM |
| Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. | |||||
| CVE-2026-69294 | 1 Microsoft | 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more | 2026-09-17 | N/A | 5.5 MEDIUM |
| Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally. | |||||
| CVE-2026-69310 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-09-17 | N/A | 7.0 HIGH |
| Use after free in Windows DNS allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69315 | 1 Microsoft | 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more | 2026-09-17 | N/A | 5.5 MEDIUM |
| Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally. | |||||
| CVE-2026-69318 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-09-17 | N/A | 5.5 MEDIUM |
| Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. | |||||
| CVE-2026-69339 | 1 Microsoft | 3 Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 | 2026-09-17 | N/A | 5.5 MEDIUM |
| Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. | |||||
| CVE-2026-69349 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-09-17 | N/A | 5.7 MEDIUM |
| Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network. | |||||
| CVE-2026-69369 | 1 Microsoft | 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more | 2026-09-17 | N/A | 5.5 MEDIUM |
| Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. | |||||
| CVE-2026-69372 | 1 Microsoft | 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more | 2026-09-17 | N/A | 5.7 MEDIUM |
| Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network. | |||||
| CVE-2026-69374 | 1 Microsoft | 8 Windows 10 21h2, Windows 10 22h2, Windows 11 23h2 and 5 more | 2026-09-17 | N/A | 6.5 MEDIUM |
| Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network. | |||||
| CVE-2026-69390 | 1 Microsoft | 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more | 2026-09-17 | N/A | 5.5 MEDIUM |
| Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. | |||||
| CVE-2026-69416 | 1 Microsoft | 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more | 2026-09-17 | N/A | 5.7 MEDIUM |
| Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. | |||||
| CVE-2026-69428 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-09-17 | N/A | 7.5 HIGH |
| Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-92984 | 2026-09-17 | N/A | 8.1 HIGH | ||
| HUBzero CMS through 2.2.32 accepts session identifiers from query strings and request variables instead of cookies alone, allowing unauthenticated attackers to fixate victim sessions. Attackers can obtain a valid session identifier, send victims a crafted link containing it, and replay the identifier after the victim authenticates to hijack their account and access. | |||||