Where
-Infinity
0

Trending

Last week
Last month
Last year

Apple macOS Golden GateInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Path Traversal, Race Condition, Null Pointer Dereference

Risk 87
Severity
10
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Path Traversal, Race Condition, Null Pointer Dereference
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox.

1 / 57
Source: NVD
First published (updated )
CVE-2026-65381

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 87
Severity
10
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 217
Source: Apple
First published (updated )
CVE-2026-113897

Apple iOSInput Validation, Buffer Overflow, Path Traversal

Risk 87
Severity
10
Input Validation, Buffer Overflow, Path Traversal
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 15
Source: Apple
First published (updated )
CVE-2026-112690

Apple macOS SequoiaApple macOS Improper Authentication Vulnerability

Risk 97
Severity
9.8
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference, Double Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 195
Source: Apple
First published (updated )
CVE-2026-65400

Apple tvOSRace Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal

Risk 86
Severity
9.8
Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to modify protected system files.

1 / 238
Source: NVD
First published (updated )
CVE-2026-84609

Apple tvOSRace Condition, Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Path Traversal

Risk 86
Severity
9.8
Race Condition, Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Path Traversal
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 46
Source: Apple
First published (updated )
CVE-2026-65414

Apple tvOSDouble Free, Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Path Traversal

Risk 86
Severity
9.8
Double Free, Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Path Traversal
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

1 / 159
Source: NVD
First published (updated )
CVE-2026-84561

Apple macOS Golden GateBuffer Overflow, Input Validation, Integer Overflow, Path Traversal, Race Condition, Use After Free

Risk 93
Severity
9.8
Buffer Overflow, Input Validation, Integer Overflow, Path Traversal, Race Condition, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local attacker may be able to cause unexpected system termination or corrupt kernel memory.

1 / 23
Source: NVD
First published (updated )
CVE-2026-84520

Apple macOS Golden GateRace Condition, Buffer Overflow, Input Validation, Integer Overflow, Path Traversal, Use After Free, Null Pointer Dereference

Risk 86
Severity
9.8
Race Condition, Buffer Overflow, Input Validation, Integer Overflow, Path Traversal, Use After Free, Null Pointer Dereference
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 147
Source: Apple
First published (updated )
CVE-2026-84539

Apple macOS Golden GateInput Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free, Integer Overflow

Risk 86
Severity
9.8
Input Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free, Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 184
Source: Apple
First published (updated )
CVE-2026-112552

Apple macOS Golden GateBuffer Overflow, Input Validation, Use After Free, Null Pointer Dereference, Race Condition, Double Free, Integer Overflow

Risk 86
Severity
9.8
Buffer Overflow, Input Validation, Use After Free, Null Pointer Dereference, Race Condition, Double Free, Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause unexpected app termination.

1 / 185
Source: MITRE
First published (updated )
CVE-2026-112526

Apple macOS Golden GateInput Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free, Integer Overflow

Risk 77
Severity
9.3
Input Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free, Integer Overflow
AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A sandboxed process may be able to circumvent sandbox restrictions.

1 / 169
Source: MITRE
First published (updated )
CVE-2026-112521

Google BrotliPortfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products

Risk 99
Severity
9.2
Trending
Month
Buffer Overflow, Input Validation, Use After Free
AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

Summary

Out-of-bounds Write vulnerability in the bundled Brotli decoder in yjh0502 erl-brotli allows an attacker who supplies a crafted Brotli-compressed stream to brotli:decode/1 to corrupt decoder state memory, disclose memory contents, crash the Erlang VM, or potentially execute code.

erl-brotli compiles its own copy of the Google Brotli C sources under csrc into a NIF, and brotlidecoderdecompressstream in csrc/brotlinif.c hands the input to BrotliDecoderDecompressStream. In csrc/dec/decode.c, DecodeBlockTypeAndLength returns false for a block switch in a category with at most one block type, and the non-streaming callers DecodeLiteralBlockSwitch, DecodeCommandBlockSwitch and DecodeDistanceBlockSwitch discard that result, so decoding continues with inconsistent state. The decoder runs inside a NIF, so memory corruption or a crash takes down the whole VM rather than the calling process. Because the package carries its own copy of the library, the Brotli version installed on the host does not matter.

This issue affects brotli: from 0.3.0 before 0.3.4.

Impact

An attacker who can get an application to decode a Brotli stream they control, for example an HTTP client that decompresses Content-Encoding: br responses with this package, can crash the Erlang VM and potentially run code inside it.

1 / 21
Source: OSV
First published (updated )
CVE-2026-111497

Apple tvOSRace Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal

Risk 66
Severity
9.1
Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages.

1 / 221
Source: NVD
First published (updated )
CVE-2026-86881

Apple WatchOSUse After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free, Path Traversal, Infoleak

Risk 66
Severity
9.1
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free, Path Traversal, Infoleak
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to fingerprint the user.

1 / 196
Source: NVD
First published (updated )
CVE-2026-84625

Apple macOS Golden GateInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference, Double Free

Risk 66
Severity
9.1
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference, Double Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 141
Source: Apple
First published (updated )
CVE-2026-43790

Apple macOSRace Condition, Buffer Overflow, Input Validation, Integer Overflow, Path Traversal, Use After Free, Null Pointer Dereference

Risk 66
Severity
9.1
Race Condition, Buffer Overflow, Input Validation, Integer Overflow, Path Traversal, Use After Free, Null Pointer Dereference
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 112
Source: Apple
First published (updated )
CVE-2026-86868

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 66
Severity
9.1
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker may be able to cause unexpected system termination or corrupt kernel memory.

1 / 124
Source: MITRE
First published (updated )
CVE-2026-112514

Apple macOS TahoeInput Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free, Integer Overflow

Risk 66
Severity
9.1
Input Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free, Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 223
Source: Apple
First published (updated )
CVE-2026-112443

Apple macOS Golden GateInput Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free, Integer Overflow

Risk 63
Severity
9
Input Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free, Integer Overflow
AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 98
Source: Apple
First published (updated )
CVE-2026-112478

Apple macOS Golden GateInput Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free, Integer Overflow

Risk 63
Severity
9
Input Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free, Integer Overflow
AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 120
Source: Apple
First published (updated )
CVE-2026-112497

Apple macOS Golden GatePath Traversal, Buffer Overflow, Input Validation, Integer Overflow, Race Condition

Risk 63
Severity
9
Path Traversal, Buffer Overflow, Input Validation, Integer Overflow, Race Condition
AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox.

1 / 19
Source: MITRE
First published (updated )
CVE-2026-84633

Apple tvOSUse After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free, Path Traversal

Risk 77
Severity
8.8
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free, Path Traversal
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory corruption.

1 / 156
Source: NVD
First published (updated )
CVE-2026-43686

Apple macOS Golden GateInput Validation, Buffer Overflow, Integer Overflow, Use After Free, Race Condition, Path Traversal, Null Pointer Dereference

Risk 77
Severity
8.8
Input Validation, Buffer Overflow, Integer Overflow, Use After Free, Race Condition, Path Traversal, Null Pointer Dereference
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote user may cause an unexpected app termination or arbitrary code execution.

1 / 79
Source: NVD
First published (updated )
CVE-2026-43692

Apple macOS Golden GateInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference

Risk 77
Severity
8.8
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

1 / 90
Source: NVD
First published (updated )
CVE-2026-84512

Apple macOS Golden GateInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference, Double Free

Risk 72
Severity
8.8
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference, Double Free
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox.

1 / 176
Source: NVD
First published (updated )
CVE-2026-84578

Apple macOS Golden GateInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference, Double Free

Risk 81
Severity
8.8
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Path Traversal, Null Pointer Dereference, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution.

1 / 243
Source: NVD
First published (updated )
CVE-2026-65374

Apple macOS Golden GateBuffer Overflow, Input Validation, Integer Overflow, Path Traversal, Race Condition, Use After Free, Null Pointer Dereference

Risk 77
Severity
8.8
Buffer Overflow, Input Validation, Integer Overflow, Path Traversal, Race Condition, Use After Free, Null Pointer Dereference
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution.

1 / 83
Source: NVD
First published (updated )
CVE-2026-84579

Apple SafariInput Validation, Integer Overflow, Use After Free, Race Condition, Null Pointer Dereference, Buffer Overflow, Double Free, Path Traversal

Risk 77
Severity
8.8
Input Validation, Integer Overflow, Use After Free, Race Condition, Null Pointer Dereference, Buffer Overflow, Double Free, Path Traversal
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 270
Source: NVD
First published (updated )
CVE-2026-86922

Apple iOSInput Validation, Integer Overflow, Use After Free, Race Condition, Buffer Overflow, Path Traversal

Risk 79
Severity
8.8
Input Validation, Integer Overflow, Use After Free, Race Condition, Buffer Overflow, Path Traversal
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.

1 / 60
Source: NVD
First published (updated )
CVE-2026-86919

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203