103,766 indexed

CVECVE vulnerabilities

103,766 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 9,351–9,400 of 103,766 · page 188 of 2076

IDTitleSummary
CVE-2026-84653CVE-2026-84653
CVSS 3.5jenkins
Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly perform permission checks in the Appearance confi…
CVE-2026-84652CVE-2026-84652
CVSS 7.3jenkins
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is authenticated via the "remember me" cookie, allowing …
CVE-2026-84651CVE-2026-84651
CVSS 6.3jenkins
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration…
CVE-2026-84650CVE-2026-84650
CVSS 8.8jenkins
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuratio…
CVE-2026-84649CVE-2026-84649
CVSS 8.8
In Stapler 1839.ved17667b_a_eb_5 through 2107.v8dfcb_e8ed317 (both inclusive), except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.447 through 2.579 (both i…
CVE-2026-84648CVE-2026-84648
CVSS 8.8jenkins
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata (source, level, and timestamp) resulting in a …
CVE-2026-84647CVE-2026-84647
CVSS 8.8
In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Stapler does not r…
CVE-2026-84646CVE-2026-84646
CVSS 4.3jenkins
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers wit…
CVE-2026-84645CVE-2026-84645
CVSS 8.8jenkins
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in J…
CVE-2026-84642CVE-2026-84642
CVSS 7.5mozilla
The values of the mail.allowed_attachment_hostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnam…
CVE-2026-84641CVE-2026-84641
CVSS 7.5mozilla
A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to pr…
CVE-2026-84640CVE-2026-84640
CVSS 7.5mozilla
A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.…
CVE-2026-8464CVE-2026-8464Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files …
CVE-2026-84639CVE-2026-84639
CVSS 9.1mozilla
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird …
CVE-2026-84637CVE-2026-84637
CVSS 9.8mozilla
Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executab…
CVE-2026-84636CVE-2026-84636
CVSS 5.5apple
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may …
CVE-2026-84635CVE-2026-84635
CVSS 6.5apple
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27,…
CVE-2026-84632CVE-2026-84632
CVSS 7.3apple
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequo…
CVE-2026-84631CVE-2026-84631
CVSS 7.8apple
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges.
CVE-2026-84630CVE-2026-84630
CVSS 4.7apple
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS…
CVE-2026-84629CVE-2026-84629
CVSS 7.5apple
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able …
CVE-2026-84628CVE-2026-84628
CVSS 5.5apple
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, w…
CVE-2026-84626CVE-2026-84626
CVSS 3.3apple
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Gold…
CVE-2026-84625CVE-2026-84625
CVSS 9.1apple
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS…
CVE-2026-84624CVE-2026-84624
CVSS 5.5apple
A permissions issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, m…
CVE-2026-84623CVE-2026-84623
CVSS 7.5apple
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able …
CVE-2026-84622CVE-2026-84622
CVSS 6.2apple
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden …
CVE-2026-84621CVE-2026-84621
CVSS 5.5apple
An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27,…
CVE-2026-84620CVE-2026-84620
CVSS 7.3apple
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, …
CVE-2026-8462CVE-2026-8462SQL injection in ClickHouse-backed meter definitions in OpenMeter OpenMeter before v1.0.0-beta.228 on all platforms allows a remote unauthenticated attacker to…
CVE-2026-84619CVE-2026-84619
CVSS 6.1apple
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An…
CVE-2026-84618CVE-2026-84618
CVSS 5.5apple
A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be ab…
CVE-2026-84617CVE-2026-84617
CVSS 5.5apple
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 2…
CVE-2026-84616CVE-2026-84616
CVSS 5.5apple
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27…
CVE-2026-84615CVE-2026-84615
CVSS 5.5apple
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, tvOS 27, visionOS 2…
CVE-2026-84612CVE-2026-84612
CVSS 5.5apple
An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27,…
CVE-2026-84611CVE-2026-84611
CVSS 7.3apple
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G…
CVE-2026-8461CVE-2026-8461
CVSS 8.8
An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be …
CVE-2026-84609CVE-2026-84609
CVSS 9.8apple
A permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS T…
CVE-2026-84607CVE-2026-84607
CVSS 7.8apple
A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, mac…
CVE-2026-84606CVE-2026-84606
CVSS 7.5apple
A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may…
CVE-2026-84603CVE-2026-84603
CVSS 5.5apple
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27, watchOS 27. An app may be able to acc…
CVE-2026-84602CVE-2026-84602
CVSS 5.5apple
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS S…
CVE-2026-84601CVE-2026-84601
CVSS 5.5apple
A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Apple Intelligence …
CVE-2026-84600CVE-2026-84600
CVSS 5.4apple
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, w…
CVE-2026-84598CVE-2026-84598
CVSS 7.5apple
A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with phy…
CVE-2026-84597CVE-2026-84597
CVSS 6.5apple
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS …
CVE-2026-84596CVE-2026-84596
CVSS 6.5apple
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, wat…
CVE-2026-84593CVE-2026-84593
CVSS 5.5apple
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to cause unexpected syste…
CVE-2026-84589CVE-2026-84589
CVSS 5.5apple
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to modify Privacy preferences.
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.