Vulnerabilities (CVE)

Total 394987 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-91737 1 Google 1 Chrome 2026-09-17 N/A 8.8 HIGH
Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-43762 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2026-09-17 N/A 5.5 MEDIUM
The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. An app may be able to access user-sensitive data.
CVE-2026-43808 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-09-17 N/A 5.5 MEDIUM
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-65345 1 Apple 3 Ipados, Iphone Os, Macos 2026-09-17 N/A 5.5 MEDIUM
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.
CVE-2026-65348 1 Apple 3 Ipados, Iphone Os, Macos 2026-09-17 N/A 5.5 MEDIUM
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system.
CVE-2026-65369 1 Apple 1 Macos 2026-09-17 N/A 5.5 MEDIUM
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may bypass Gatekeeper checks.
CVE-2026-84562 1 Apple 1 Macos 2026-09-17 N/A 4.7 MEDIUM
A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data.
CVE-2026-84586 1 Apple 2 Macos, Watchos 2026-09-17 N/A 5.5 MEDIUM
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, watchOS 27. A malicious application may be able to leak sensitive user information.
CVE-2026-84593 1 Apple 2 Ipados, Iphone Os 2026-09-17 N/A 5.5 MEDIUM
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to cause unexpected system termination.
CVE-2026-84603 1 Apple 4 Ipados, Iphone Os, Visionos and 1 more 2026-09-17 N/A 5.5 MEDIUM
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
CVE-2026-84606 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2026-09-17 N/A 7.5 HIGH
A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to identify a user across reinstalls.
CVE-2026-69288 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-09-17 N/A 5.5 MEDIUM
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
CVE-2026-69294 1 Microsoft 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more 2026-09-17 N/A 5.5 MEDIUM
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
CVE-2026-69310 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-09-17 N/A 7.0 HIGH
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-69315 1 Microsoft 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more 2026-09-17 N/A 5.5 MEDIUM
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally.
CVE-2026-69318 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-09-17 N/A 5.5 MEDIUM
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-69339 1 Microsoft 3 Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 2026-09-17 N/A 5.5 MEDIUM
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
CVE-2026-69349 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-09-17 N/A 5.7 MEDIUM
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.
CVE-2026-69369 1 Microsoft 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more 2026-09-17 N/A 5.5 MEDIUM
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
CVE-2026-69372 1 Microsoft 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more 2026-09-17 N/A 5.7 MEDIUM
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.