Total
7504 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-11980 | 4 Apple, Ibm, Linux and 1 more | 4 Macos, Aspera, Linux Kernel and 1 more | 2026-10-23 | N/A | 7.3 HIGH |
| IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up. | |||||
| CVE-2026-17973 | 2 Apple, Google | 2 Macos, Chrome | 2026-10-23 | N/A | 5.5 MEDIUM |
| Inappropriate implementation in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low) | |||||
| CVE-2026-17950 | 2 Apple, Google | 2 Macos, Chrome | 2026-10-23 | N/A | 8.8 HIGH |
| Inappropriate implementation in Safebrowsing in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a malicious file. (Chromium security severity: Low) | |||||
| CVE-2026-19557 | 2 Apple, Google | 2 Macos, Chrome | 2026-10-23 | N/A | 8.3 HIGH |
| Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-0294 | 3 Apple, Microsoft, Paloaltonetworks | 3 Macos, Windows, Prisma Access Agent | 2026-10-23 | N/A | 7.8 HIGH |
| A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected. | |||||
| CVE-2026-96960 | 3 Apple, Linux, Microsoft | 19 Macos, Linux Kernel, .net and 16 more | 2026-10-22 | N/A | 7.5 HIGH |
| Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-96959 | 3 Apple, Linux, Microsoft | 19 Macos, Linux Kernel, .net and 16 more | 2026-10-22 | N/A | 7.5 HIGH |
| Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-96958 | 3 Apple, Linux, Microsoft | 19 Macos, Linux Kernel, .net and 16 more | 2026-10-22 | N/A | 7.5 HIGH |
| Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-96957 | 3 Apple, Linux, Microsoft | 6 Macos, Linux Kernel, .net and 3 more | 2026-10-22 | N/A | 8.8 HIGH |
| Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | |||||
| CVE-2026-96222 | 3 Apple, Linux, Microsoft | 21 Macos, Linux Kernel, .net and 18 more | 2026-10-22 | N/A | 7.4 HIGH |
| Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-83661 | 3 Adobe, Apple, Microsoft | 3 Photoshop, Macos, Windows | 2026-10-22 | N/A | 7.8 HIGH |
| Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-95635 | 3 Adobe, Apple, Microsoft | 3 Photoshop, Macos, Windows | 2026-10-22 | N/A | 7.8 HIGH |
| Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-95636 | 3 Adobe, Apple, Microsoft | 3 Photoshop, Macos, Windows | 2026-10-22 | N/A | 7.8 HIGH |
| Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-95637 | 3 Adobe, Apple, Microsoft | 3 Photoshop, Macos, Windows | 2026-10-22 | N/A | 7.8 HIGH |
| Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-95638 | 3 Adobe, Apple, Microsoft | 3 Photoshop, Macos, Windows | 2026-10-22 | N/A | 7.8 HIGH |
| Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-95639 | 3 Adobe, Apple, Microsoft | 3 Photoshop, Macos, Windows | 2026-10-22 | N/A | 8.6 HIGH |
| Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed. | |||||
| CVE-2026-95640 | 3 Adobe, Apple, Microsoft | 3 Photoshop, Macos, Windows | 2026-10-22 | N/A | 5.5 MEDIUM |
| Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-95641 | 3 Adobe, Apple, Microsoft | 3 Photoshop, Macos, Windows | 2026-10-22 | N/A | 7.8 HIGH |
| Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-76040 | 2 Apple, Google | 2 Macos, Chrome | 2026-10-22 | N/A | 8.8 HIGH |
| Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-76035 | 2 Apple, Google | 2 Macos, Chrome | 2026-10-22 | N/A | 9.6 CRITICAL |
| Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||