103,766 indexed
CVECVE vulnerabilities
103,766 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 9,451–9,500 of 103,766 · page 190 of 2076
| ID | Title | Summary |
|---|---|---|
| CVE-2026-84533 | CVE-2026-84533 CVSS 5.3apple | A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An … |
| CVE-2026-84532 | CVE-2026-84532 CVSS 5.4apple | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
| CVE-2026-84531 | CVE-2026-84531 CVSS 6.2apple | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing malicio… |
| CVE-2026-84530 | CVE-2026-84530 CVSS 3.3apple | An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Gol… |
| CVE-2026-84527 | CVE-2026-84527 CVSS 5.5apple | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe … |
| CVE-2026-84526 | CVE-2026-84526 CVSS 4.3apple | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
| CVE-2026-84525 | CVE-2026-84525 CVSS 5.5apple | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be ab… |
| CVE-2026-84524 | CVE-2026-84524 CVSS 4.3apple | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27,… |
| CVE-2026-84523 | CVE-2026-84523 CVSS 5.5apple | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
| CVE-2026-84522 | CVE-2026-84522 CVSS 5.9apple | A race condition was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data. |
| CVE-2026-84521 | CVE-2026-84521 CVSS 5.5apple | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate … |
| CVE-2026-84520 | CVE-2026-84520 CVSS 9.8apple | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local attacker may be able to cause unexpected sy… |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability KEVCVSS 9.8Citrix | Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which could lead to… |
| CVE-2026-84519 | CVE-2026-84519 CVSS 6.5apple | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
| CVE-2026-84518 | CVE-2026-84518 CVSS 4.3apple | This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website m… |
| CVE-2026-84517 | CVE-2026-84517 CVSS 5.5apple | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may… |
| CVE-2026-84516 | CVE-2026-84516 CVSS 8.1apple | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processin… |
| CVE-2026-84515 | CVE-2026-84515 CVSS 7.8apple | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Co… |
| CVE-2026-84514 | CVE-2026-84514 CVSS 5.5apple | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be a… |
| CVE-2026-84513 | CVE-2026-84513 CVSS 5.5apple | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macO… |
| CVE-2026-84512 | CVE-2026-84512 CVSS 8.8apple | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a ma… |
| CVE-2026-84511 | CVE-2026-84511 CVSS 7.8apple | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8… |
| CVE-2026-84510 | CVE-2026-84510 CVSS 6.5apple | A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27… |
| CVE-2026-8451 | CVE-2026-8451 CVSS 7.5citrix | Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML I… |
| CVE-2026-84509 | CVE-2026-84509 CVSS 6.5apple | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connectin… |
| CVE-2026-84507 | CVE-2026-84507 CVSS 7.8apple | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS… |
| CVE-2026-84506 | CVE-2026-84506 CVSS 7.8apple | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app… |
| CVE-2026-84505 | CVE-2026-84505 CVSS 7.8apple | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An… |
| CVE-2026-84504 | CVE-2026-84504 CVSS 8.1fastify | fastify versions before 5.12.2 treat the object resolved by a successful Ajv async validator as the value result protocol used by custom validator compilers. I… |
| CVE-2026-84502 | CVE-2026-84502 CVSS 9.9 | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The Project scm_url field is not validated against values that begin with a d… |
| CVE-2026-84501 | CVE-2026-84501 CVSS 5.3apache | An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted add_auth("ensemble", ...) request … |
| CVE-2026-8450 | CVE-2026-8450 CVSS 9.1 | HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file(). send_file() opens its string argument with Perl's 2-arg open(). The 2-a… |
| CVE-2026-84499 | CVE-2026-84499 CVSS 7.7 | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displa… |
| CVE-2026-84497 | CVE-2026-84497 CVSS 7.8apple | A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, mac… |
| CVE-2026-84492 | CVE-2026-84492 CVSS 4.7apple | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS… |
| CVE-2026-84491 | CVE-2026-84491 CVSS 5.5apple | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, tv… |
| CVE-2026-84489 | CVE-2026-84489 CVSS 5.5apple | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 2… |
| CVE-2026-84487 | CVE-2026-84487 CVSS 6.5apple | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, … |
| CVE-2026-84486 | CVE-2026-84486 CVSS 8.2 | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Four debug views that trigger the internal task, dependency, and workflow sch… |
| CVE-2026-84485 | CVE-2026-84485 CVSS 7.5 | APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve m… |
| CVE-2026-84484 | CVE-2026-84484 CVSS 7.5 | ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthenticated remote attackers to read memor… |
| CVE-2026-84483 | CVE-2026-84483 CVSS 5.3 | WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass.json.php that allows unauthenticated attackers to compute valid… |
| CVE-2026-84482 | CVE-2026-84482 CVSS 8.8 | WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the get_domain() and isSameDomain() functions that fail to properly … |
| CVE-2026-84481 | CVE-2026-84481 | WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration endpoint that returns sensitive configur… |
| CVE-2026-84480 | CVE-2026-84480 CVSS 9.8 | WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php, allowing attackers to use expired tokens to reset account pas… |
| CVE-2026-84479 | CVE-2026-84479 CVSS 9.1 | WWBN AVideo (current e01e41ecc and earlier) makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncode… |
| CVE-2026-84478 | CVE-2026-84478 CVSS 7.3 | WWBN AVideo contains a path traversal vulnerability in the API get_api_login_code endpoint that allows unauthenticated attackers to delete arbitrary .log files… |
| CVE-2026-84477 | CVE-2026-84477 CVSS 5.4 | AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streaming permission to inject malicious scrip… |
| CVE-2026-84476 | CVE-2026-84476 CVSS 7.5 | WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allowing attackers to spoof the client address used by en… |
| CVE-2026-84474 | CVE-2026-84474 CVSS 9.9 | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret (host_config_key) is exposed to users holdin… |