WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor apple✕
Overview 9,527 matches · 8 in Waratek scope · 2 protected · 179 exploited · 107 CISA KEV · 665 public PoC · 63 EPSS ≥ 0.5
split by peak 1,173 / year
Not applicable: 9,474Outside Waratek scope: 45No exploit published: 4Mitigation candidate: 2Protected by Waratek: 2 Low: 579Medium: 4,288High: 4,190Critical: 470 not blocked: 9,525blocked by ARMR today: 2 No public exploit: 8,685Forecast only: 16Proof of concept only: 164Working exploit published: 483Exploited: 179
19961 Not applicable1 High1 not blocked1 No public exploit1 19971 Not applicable1 Medium1 not blocked1 No public exploit1 19983 Not applicable3 High1 Medium2 not blocked3 Working exploit published1 No public exploit2 19997 Not applicable7 Medium6 Low1 not blocked7 Working exploit published2 No public exploit5 20004 Not applicable4 High2 Medium2 not blocked4 Working exploit published1 No public exploit3 200112 No exploit published1 Not applicable11 High7 Medium2 Low3 not blocked12 Working exploit published2 No public exploit10 200224 Outside Waratek scope3 Not applicable21 Critical1 High13 Medium9 Low1 not blocked24 Exploited1 Working exploit published5 No public exploit18 200347 Not applicable47 Critical1 High20 Medium23 Low3 not blocked47 Exploited4 Working exploit published4 No public exploit39 200465 Not applicable65 Critical1 High33 Medium24 Low7 not blocked65 Exploited1 Working exploit published7 No public exploit57 2005148 Not applicable148 Critical1 High56 Medium65 Low26 not blocked148 Working exploit published16 No public exploit132 2006140 Not applicable140 High43 Medium78 Low19 not blocked140 Working exploit published21 Proof of concept only1 No public exploit118 2007215 Not applicable215 Critical1 High114 Medium93 Low7 not blocked215 Exploited2 Working exploit published45 No public exploit168 2008221 Not applicable221 Critical2 High88 Medium112 Low19 not blocked221 Working exploit published21 No public exploit200 2009229 Not applicable229 Critical1 High91 Medium125 Low12 not blocked229 Working exploit published26 No public exploit203 2010322 Not applicable322 Critical4 High130 Medium176 Low12 not blocked322 Exploited2 Working exploit published26 No public exploit294 2011305 Not applicable305 High157 Medium129 Low19 not blocked305 Exploited3 Working exploit published10 Proof of concept only1 No public exploit291 2012356 Not applicable356 Critical1 High176 Medium165 Low14 not blocked356 Exploited1 Working exploit published8 Proof of concept only3 No public exploit344 2013196 Not applicable196 High38 Medium129 Low29 not blocked196 Working exploit published9 No public exploit187 2014312 Outside Waratek scope1 Not applicable311 Critical2 High81 Medium187 Low42 not blocked312 Exploited3 Working exploit published6 Proof of concept only4 Forecast only1 No public exploit298 2015703 Outside Waratek scope3 Not applicable700 High228 Medium418 Low57 not blocked703 Exploited2 Working exploit published34 Proof of concept only3 No public exploit664 2016333 Outside Waratek scope1 Not applicable332 Critical27 High190 Medium93 Low23 not blocked333 Exploited3 Working exploit published32 Proof of concept only4 Forecast only2 No public exploit292 2017602 Outside Waratek scope5 Not applicable597 Critical43 High368 Medium162 Low29 not blocked602 Exploited4 Working exploit published124 Proof of concept only2 No public exploit472 2018191 Outside Waratek scope2 Not applicable189 Critical11 High113 Medium64 Low3 not blocked191 Exploited3 Working exploit published20 Proof of concept only1 No public exploit167 2019544 Protected by Waratek1 Outside Waratek scope10 Not applicable533 Critical45 High327 Medium153 Low19 blocked by ARMR today1 not blocked543 Exploited12 Working exploit published51 Proof of concept only14 Forecast only6 No public exploit461 2020497 Mitigation candidate1 Outside Waratek scope2 Not applicable494 Critical33 High276 Medium161 Low27 not blocked497 Exploited14 Working exploit published7 Proof of concept only7 No public exploit469 2021597 Protected by Waratek1 Outside Waratek scope4 Not applicable592 Critical31 High334 Medium212 Low20 blocked by ARMR today1 not blocked596 Exploited28 Working exploit published2 Proof of concept only8 Forecast only5 No public exploit554 2022457 No exploit published3 Outside Waratek scope6 Not applicable448 Critical30 High267 Medium147 Low13 not blocked457 Exploited27 Working exploit published1 Proof of concept only21 Forecast only1 No public exploit407 2023489 Mitigation candidate1 Outside Waratek scope3 Not applicable485 Critical22 High203 Medium227 Low37 not blocked489 Exploited34 Proof of concept only31 No public exploit424 2024602 Outside Waratek scope3 Not applicable599 Critical25 High224 Medium305 Low48 not blocked602 Exploited10 Working exploit published1 Proof of concept only18 No public exploit573 2025731 Outside Waratek scope1 Not applicable730 Critical106 High191 Medium394 Low40 not blocked731 Exploited22 Working exploit published1 Proof of concept only12 Forecast only1 No public exploit695 20261,173 Outside Waratek scope1 Not applicable1,172 Critical82 High418 Medium624 Low49 not blocked1,173 Exploited3 Proof of concept only34 No public exploit1,136
19961999200220052008201120142017202020232026
9,527 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 96 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-113901 Medium 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-113900 High 2026-10-26 Not applicable No public exploit A race condition was addressed with improved state handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
CVE-2026-113899 Medium 2026-10-26 Not applicable No public exploit The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.
CVE-2026-113898 Low 2026-10-26 Not applicable No public exploit A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. A malicious application may be able to bypass Privacy preferences.
CVE-2026-113897 Critical 2026-10-26 Not applicable No public exploit This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A remote attacker may be able to break out of Web Content sandbox.
CVE-2026-113896 Medium 2026-10-26 Not applicable No public exploit A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112708 Medium 2026-10-26 Not applicable No public exploit A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt process memory.
CVE-2026-112707 Low 2026-10-26 Not applicable No public exploit A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to identify what other apps a user has installed.
CVE-2026-112706 Medium 2026-10-26 Not applicable Proof of concept only A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112705 Medium 2026-10-26 Not applicable Proof of concept only An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2. An app may be able to cause unexpected system termination.
CVE-2026-112704 Medium 2026-10-26 Not applicable No public exploit An information leakage was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.
CVE-2026-112701 Medium 2026-10-26 Not applicable No public exploit An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112699 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may result in the disclosure of process memory.
CVE-2026-112698 Medium 2026-10-26 Not applicable No public exploit The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.
CVE-2026-112697 High 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-112696 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-112695 Medium 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
CVE-2026-112693 Medium 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-112692 Medium 2026-10-26 Not applicable No public exploit This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112691 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
CVE-2026-112690 Critical 2026-10-26 Not applicable No public exploit This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. A remote attacker may be able to break out of the WebContent sandbox.
CVE-2026-112689 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-112688 High 2026-10-26 Not applicable Proof of concept only A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Parsing a file may lead to an unexpected app termination or arbitrary code execution.
CVE-2026-112687 Medium 2026-10-26 Not applicable No public exploit This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory.
CVE-2026-112686 Low 2026-10-26 Not applicable No public exploit A race condition was addressed with improved locking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
CVE-2026-112685 Medium 2026-10-26 Not applicable No public exploit An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112684 Medium 2026-10-26 Not applicable No public exploit This issue was addressed through improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-112683 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.
CVE-2026-112682 High 2026-10-26 Not applicable No public exploit An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. A remote attacker may be able to cause unexpected app termination.
CVE-2026-112681 Medium 2026-10-26 Not applicable No public exploit This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to fingerprint the user.
CVE-2026-112680 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may result in the disclosure of process memory.
CVE-2026-112679 High 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-112678 Medium 2026-10-26 Not applicable No public exploit A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112677 High 2026-10-26 Not applicable No public exploit An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An application may be able to execute arbitrary code with system privileges.
CVE-2026-112676 High 2026-10-26 Not applicable No public exploit This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access a user's Photos Library.
CVE-2026-112675 Medium 2026-10-26 Not applicable No public exploit This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.
CVE-2026-112673 Medium 2026-10-26 Not applicable No public exploit A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
CVE-2026-112672 Medium 2026-10-26 Not applicable No public exploit The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted ZIP archive may bypass Gatekeeper checks.
CVE-2026-112671 High 2026-10-26 Not applicable No public exploit A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. A remote attacker may be able to cause a denial-of-service.
CVE-2026-112670 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to heap corruption.
CVE-2026-112669 Medium 2026-10-26 Not applicable No public exploit A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2026-112668 High 2026-10-26 Not applicable No public exploit A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
CVE-2026-112666 Medium 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
CVE-2026-112665 Low 2026-10-26 Not applicable No public exploit An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to determine kernel memory layout.
CVE-2026-112660 Low 2026-10-26 Not applicable No public exploit An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to bypass certain Privacy preferences.
CVE-2026-112659 High 2026-10-26 Not applicable No public exploit A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-112658 Medium 2026-10-26 Not applicable No public exploit This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access sensitive user data.
CVE-2026-112656 Low 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory.
CVE-2026-112655 High 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-112654 High 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
CVE-2026-112653 Medium 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
CVE-2026-112652 Medium 2026-10-26 Not applicable No public exploit A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An malicious app may be able to bypass certificate validation.
CVE-2026-112651 High 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-112647 Medium 2026-10-26 Not applicable No public exploit An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.
CVE-2026-112646 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt process memory.
CVE-2026-112642 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory.
CVE-2026-112640 High 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to memory corruption.
CVE-2026-112639 High 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-112638 High 2026-10-26 Not applicable No public exploit A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker in radio range may be able to cause unexpected system termination.
CVE-2026-112637 High 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-112634 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may lead to unexpected app termination.
CVE-2026-112633 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected app termination.
CVE-2026-112632 Medium 2026-10-26 Not applicable No public exploit An uninitialized memory issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
CVE-2026-112630 Low 2026-10-26 Not applicable No public exploit An uninitialized memory issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may result in disclosure of process memory.
CVE-2026-112629 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may lead to unexpected app termination.
CVE-2026-112628 Medium 2026-10-26 Not applicable No public exploit This issue was addressed with improved data access restriction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112627 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
CVE-2026-112626 High 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-112625 High 2026-10-26 Not applicable No public exploit An integer underflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may result in memory corruption.
CVE-2026-112624 Medium 2026-10-26 Not applicable No public exploit This issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to bypass Privacy preferences.
CVE-2026-112623 High 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-112622 High 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An attacker in radio range may be able to cause unexpected system termination.
CVE-2026-112621 High 2026-10-26 Not applicable Proof of concept only An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing a maliciously crafted image may result in memory corruption.
CVE-2026-112620 High 2026-10-26 Not applicable No public exploit A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2. An attacker in a privileged network position may be able to cause a denial-of-service.
CVE-2026-112619 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted calendar invitation may lead to memory corruption.
CVE-2026-112618 Medium 2026-10-26 Not applicable No public exploit An access issue was addressed with improved access restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, visionOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112617 Medium 2026-10-26 Not applicable No public exploit An information disclosure issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data.
CVE-2026-112616 Medium 2026-10-26 Not applicable No public exploit An authorization issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112615 Medium 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
CVE-2026-112614 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected app termination.
CVE-2026-112612 Medium 2026-10-26 Not applicable No public exploit A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.
CVE-2026-112611 Medium 2026-10-26 Not applicable Proof of concept only An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted PDF file may lead to memory corruption.
CVE-2026-112610 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted PDF file may lead to memory corruption.
CVE-2026-112609 Medium 2026-10-26 Not applicable No public exploit This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112608 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory.
CVE-2026-112607 High 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. A remote attacker may be able to leak memory.
CVE-2026-112606 High 2026-10-26 Not applicable No public exploit A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
CVE-2026-112604 Medium 2026-10-26 Not applicable No public exploit An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination.
CVE-2026-112601 Medium 2026-10-26 Not applicable No public exploit An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.8.2. An app may be able to cause a denial-of-service.
CVE-2026-112599 Medium 2026-10-26 Not applicable No public exploit A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2026-112596 Medium 2026-10-26 Not applicable No public exploit An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected system termination.
CVE-2026-112595 High 2026-10-26 Not applicable No public exploit This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network.
CVE-2026-112593 High 2026-10-26 Not applicable No public exploit An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-112577 Medium 2026-10-26 Not applicable No public exploit A privacy issue was addressed by moving sensitive data. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data.
CVE-2026-112576 Medium 2026-10-26 Not applicable No public exploit A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected changes to copy-on-write memory.
CVE-2026-112575 Medium 2026-10-26 Not applicable No public exploit The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to monitor keystrokes without user permission.
CVE-2026-112571 Medium 2026-10-26 Not applicable No public exploit A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
CVE-2026-112570 High 2026-10-26 Not applicable No public exploit An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.
CVE-2026-112569 High 2026-10-26 Not applicable No public exploit An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.
CVE-2026-112568 Medium 2026-10-26 Not applicable No public exploit A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may bypass Gatekeeper checks.
‹ prev page 2 of 96 next ›