Export limit exceeded: 373555 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 373555 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (373555 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-64693 | 1 Apple | 5 Ios And Ipados, Macos, Tvos and 2 more | 2026-08-03 | 5.5 Medium |
| A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted image may lead to a denial-of-service. | ||||
| CVE-2026-64758 | 1 Apple | 5 Ios And Ipados, Macos, Tvos and 2 more | 2026-08-03 | N/A |
| The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination. | ||||
| CVE-2026-43755 | 1 Apple | 1 Macos | 2026-08-03 | 7 High |
| A race condition was addressed with improved state management. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges. | ||||
| CVE-2026-64719 | 1 Apple | 6 Ios And Ipados, Macos, Safari and 3 more | 2026-08-03 | 8.1 High |
| An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash. | ||||
| CVE-2026-68869 | 2026-08-03 | N/A | ||
| This CVE ID was assigned in error. Upon further review, the reported issue does not represent a security vulnerability and does not require a CVE record. | ||||
| CVE-2026-67609 | 1 Teleniasoftware | 1 Tvox | 2026-08-03 | 7.8 High |
| Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege escalation vulnerability that allows attackers with access to the apache account to execute arbitrary commands as root by exploiting an insecure sudoers configuration in /etc/sudoers.d/telenia. The configuration grants the apache user NOPASSWD execution of /bin/nice, which can be leveraged to invoke arbitrary commands, enabling full root-level command execution without supplying a password. | ||||
| CVE-2026-64774 | 1 Apple | 4 Ios And Ipados, Macos, Tvos and 1 more | 2026-08-03 | 9.8 Critical |
| An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption. | ||||
| CVE-2026-64723 | 1 Apple | 1 Macos | 2026-08-03 | 5.5 Medium |
| A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data. | ||||
| CVE-2026-43796 | 1 Apple | 5 Ios And Ipados, Macos, Tvos and 2 more | 2026-08-03 | 5.5 Medium |
| This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data. | ||||
| CVE-2026-64728 | 1 Apple | 6 Ios And Ipados, Macos, Safari and 3 more | 2026-08-03 | 6.5 Medium |
| A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy. | ||||
| CVE-2026-64769 | 1 Apple | 4 Ios And Ipados, Macos, Tvos and 1 more | 2026-08-03 | 9.8 Critical |
| An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption. | ||||
| CVE-2026-64694 | 1 Apple | 1 Macos | 2026-08-03 | 9.8 Critical |
| An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination. | ||||
| CVE-2026-28945 | 1 Apple | 1 Macos | 2026-08-03 | 7.1 High |
| A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to bypass network restrictions. | ||||
| CVE-2026-43764 | 1 Apple | 1 Macos | 2026-08-03 | 9.8 Critical |
| An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination. | ||||
| CVE-2026-28928 | 1 Apple | 4 Ios And Ipados, Macos, Tvos and 1 more | 2026-08-03 | 9.8 Critical |
| A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination. | ||||
| CVE-2026-43729 | 1 Apple | 4 Ios And Ipados, Macos, Tvos and 1 more | 2026-08-03 | 7.8 High |
| The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. Processing a maliciously crafted image may corrupt process memory. | ||||
| CVE-2026-43800 | 1 Apple | 4 Ios And Ipados, Macos, Tvos and 1 more | 2026-08-03 | 5.5 Medium |
| An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to access sensitive user data. | ||||
| CVE-2026-64732 | 1 Apple | 1 Ios And Ipados | 2026-08-03 | 4.6 Medium |
| This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. An attacker with physical access may be able to access sensitive user data during iPhone Mirroring. | ||||
| CVE-2026-43744 | 1 Apple | 5 Ios And Ipados, Macos, Tvos and 2 more | 2026-08-03 | 5.5 Medium |
| An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing an audio stream in a maliciously crafted media file may terminate the process. | ||||
| CVE-2026-53551 | 1 Free5gc | 2 Ausf, Free5gc | 2026-08-03 | N/A |
| free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the free5GC AUSF (Authentication Server Function) does not validate the supiOrSuci field in UE authentication requests. Null bytes (\x00) and other control characters pass through JSON parsing unchanged and are forwarded to the UDM in an unescaped URL path. This causes Go's net/url.Parse() to fail, returning HTTP 500 "System failure" and leaking internal stack traces. An unauthenticated attacker can trigger this at scale causing denial of service for all subscribers attempting authentication through the affected AUSF. This vulnerability is fixed in 1.4.5. | ||||