Search

Expected end of text, found '/' (at char 46), (line:1, col:47)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (395710 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-64701 1 Apple 1 Macos 2026-09-17 7.8 High
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
CVE-2026-64756 1 Apple 4 Ios And Ipados, Ipados, Iphone Os and 1 more 2026-09-17 5.5 Medium
A path handling issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.
CVE-2026-86883 1 Apple 4 Ios And Ipados, Ipados, Iphone Os and 1 more 2026-09-17 5.5 Medium
A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data.
CVE-2026-84575 1 Apple 7 Ios And Ipados, Ipados, Iphone Os and 4 more 2026-09-17 7.8 High
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-84522 1 Apple 1 Macos 2026-09-17 5.9 Medium
A race condition was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.
CVE-2026-43690 1 Apple 1 Macos 2026-09-17 4.7 Medium
A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be able to read kernel memory.
CVE-2026-84534 1 Apple 5 Ios And Ipados, Ipados, Iphone Os and 2 more 2026-09-17 5.5 Medium
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. Extracting a maliciously crafted archive may allow an attacker to write arbitrary files.
CVE-2026-84563 1 Apple 1 Macos 2026-09-17 7.5 High
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
CVE-2026-84631 1 Apple 1 Macos 2026-09-17 7.8 High
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges.
CVE-2026-86876 1 Apple 6 Ios And Ipados, Ipados, Iphone Os and 3 more 2026-09-17 5.2 Medium
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2026-28960 1 Apple 3 Ios And Ipados, Ipados, Iphone Os 2026-09-17 7.5 High
A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker may be able to cause a denial-of-service.
CVE-2026-65409 1 Apple 7 Ios And Ipados, Ipados, Iphone Os and 4 more 2026-09-17 5.5 Medium
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause a denial of service.
CVE-2026-67399 1 Webpros 1 Whmcs 2026-09-17 N/A
Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code.
CVE-2026-25290 1 Qualcomm 1 Snapdragon 2026-09-17 7.8 High
Memory Corruption when validating large data buffers from external sources using addition to check buffer length.
CVE-2026-24073 1 Qualcomm 1 Snapdragon 2026-09-17 7.8 High
Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.
CVE-2026-62108 2 Miniorange, Wordpress 2 Headless Single Sign On, Wordpress 2026-09-17 9.8 Critical
Unauthenticated Broken Authentication in Headless Single Sign On <= 1.7.0 versions.
CVE-2026-14277 1 Ibm 1 I Access Family 2026-09-17 6.3 Medium
IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file.
CVE-2026-14276 1 Ibm 1 I Access Family 2026-09-17 6.3 Medium
IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action.
CVE-2026-14275 1 Ibm 1 I Access Family 2026-09-17 6.3 Medium
IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL command.
CVE-2026-76413 1 Cisco 1 Secure Firewall Management Center 2026-09-17 8.2 High
A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An attacker could exploit this vulnerability by performing session token forgery techniques. A successful exploit could allow the attacker to log in as the administrator user and, by repeating this action, keep legitimate administrators locked out of the ASDM indefinitely.