Export limit exceeded: 16012 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (16012 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-113964 1 Apple 4 Ios And Ipados, Macos, Visionos and 1 more 2026-11-10 5.4 Medium
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction.
CVE-2026-113968 1 Apple 4 Ios And Ipados, Macos, Visionos and 1 more 2026-11-10 5.4 Medium
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts.
CVE-2026-113970 1 Apple 4 Ios And Ipados, Macos, Visionos and 1 more 2026-11-10 8.8 High
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.
CVE-2026-96957 3 Apple, Linux, Microsoft 8 Macos, Linux Kernel, .net and 5 more 2026-11-10 8.8 High
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-113963 1 Apple 3 Ios And Ipados, Visionos, Watchos 2026-11-10 5.5 Medium
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2.1 and iPadOS 27.2.1, visionOS 27.2.1, watchOS 27.2.1. An app may be able to access sensitive user data.
CVE-2026-113965 1 Apple 4 Ios And Ipados, Macos, Visionos and 1 more 2026-11-10 5.4 Medium
This issue was addressed with improved checks. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. A malicious Bluetooth device may be able to establish a pairing without user interaction.
CVE-2026-113971 1 Apple 1 Ios And Ipados 2026-11-10 3.5 Low
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to pair a device with an AirPlay receiver from the lock screen.
CVE-2026-113960 1 Apple 4 Ios And Ipados, Macos, Visionos and 1 more 2026-11-10 N/A
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A user added to an iMessage group may be able to access messages sent before they joined.
CVE-2026-100126 3 Adobe, Apple, Microsoft 4 Adobe Bridge, Bridge, Macos and 1 more 2026-11-09 5.5 Medium
Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-100128 3 Adobe, Apple, Microsoft 4 Adobe Bridge, Bridge, Macos and 1 more 2026-11-09 7.8 High
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-100129 3 Adobe, Apple, Microsoft 4 Adobe Bridge, Bridge, Macos and 1 more 2026-11-09 7.8 High
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-100130 3 Adobe, Apple, Microsoft 3 Substance 3d Sampler, Macos, Windows 2026-11-09 5.5 Medium
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-100131 3 Adobe, Apple, Microsoft 3 Substance 3d Sampler, Macos, Windows 2026-11-09 5.5 Medium
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-113961 1 Apple 4 Ios And Ipados, Macos, Visionos and 1 more 2026-11-09 7.5 High
An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A remote attacker may be able to join an iMessage group chat and receive its messages.
CVE-2026-113969 1 Apple 4 Ios And Ipados, Macos, Visionos and 1 more 2026-11-09 N/A
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.
CVE-2026-112523 1 Apple 1 Macos 2026-11-09 5.5 Medium
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access user-sensitive data.
CVE-2026-28850 1 Apple 2 Macos, Visionos 2026-11-09 5.5 Medium
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.8, visionOS 27. An app may be able to access sensitive user data.
CVE-2026-84582 1 Apple 7 Ios And Ipados, Ipados, Iphone Os and 4 more 2026-11-09 5.5 Medium
A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
CVE-2026-84613 1 Apple 7 Ios And Ipados, Ipados, Iphone Os and 4 more 2026-11-09 6.5 Medium
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected system termination.
CVE-2026-86872 1 Apple 3 Safari, Visionos, Watchos 2026-11-09 5.4 Medium
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.