Where
-Infinity
0

Trending

Last week
Last month
Last year

Expat libexpatlibexpat 2.7.2 fixes CVE-2025-59375 (DoS, CWE-770)

Risk 50
Severity
7.5
Use After Free, Race Condition, Input Validation, Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 44
Source: Apple
First published (updated )
CVE-2025-59375

debian/perlPerl threads have a working directory race condition where file operations may target unintended paths

Risk 47
Severity
5.9
Race Condition, Buffer Overflow, Input Validation
AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AirPort. A permissions issue was addressed with additional restrictions.

1 / 62
Source: Apple
First published (updated )
CVE-2025-40909

Http\ \Input Validation, Use After Free, Race Condition

Risk 83
Severity
8.1
Input Validation, Use After Free, Race Condition
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Accounts. A logic issue was addressed with improved file handling.

1 / 48
Source: Apple
First published (updated )
CVE-2023-31486

Google BrotliPortfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products

Risk 99
Severity
9.2
Trending
Month
Buffer Overflow, Input Validation, Use After Free
AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

Summary

Out-of-bounds Write vulnerability in the bundled Brotli decoder in yjh0502 erl-brotli allows an attacker who supplies a crafted Brotli-compressed stream to brotli:decode/1 to corrupt decoder state memory, disclose memory contents, crash the Erlang VM, or potentially execute code.

erl-brotli compiles its own copy of the Google Brotli C sources under csrc into a NIF, and brotlidecoderdecompressstream in csrc/brotlinif.c hands the input to BrotliDecoderDecompressStream. In csrc/dec/decode.c, DecodeBlockTypeAndLength returns false for a block switch in a category with at most one block type, and the non-streaming callers DecodeLiteralBlockSwitch, DecodeCommandBlockSwitch and DecodeDistanceBlockSwitch discard that result, so decoding continues with inconsistent state. The decoder runs inside a NIF, so memory corruption or a crash takes down the whole VM rather than the calling process. Because the package carries its own copy of the library, the Brotli version installed on the host does not matter.

This issue affects brotli: from 0.3.0 before 0.3.4.

Impact

An attacker who can get an application to decode a Brotli stream they control, for example an HTTP client that decompresses Content-Encoding: br responses with this package, can crash the Erlang VM and potentially run code inside it.

1 / 21
Source: OSV
First published (updated )
CVE-2026-111497

Apple iOSAirPlay. A logic issue was addressed with improved state management.

Risk 34
Severity
5.4
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-113968

Apple iOSInput Validation, Use After Free

Risk 47
Input Validation, Use After Free

AirPlay. A logic issue was addressed with improved state management.

1 / 9
Source: Apple
First published (updated )
CVE-2026-113960

Apple iOSUse After Free

Risk 79
Severity
8.8
Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.

1 / 4
Source: MITRE
First published (updated )
CVE-2026-113970

Apple iOSInput Validation, Use After Free

Risk 34
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction.

1 / 7
Source: MITRE
First published (updated )
CVE-2026-113964

Apple iOSInput Validation, Use After Free

Risk 39
Input Validation, Use After Free

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.

1 / 11
Source: MITRE
First published (updated )
CVE-2026-113969

Apple iOSInput Validation, Use After Free

Risk 34
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 6
Source: Apple
First published (updated )
CVE-2026-113965

Apple iOSInput Validation, Use After Free

Risk 43
Severity
7.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 9
Source: Apple
First published (updated )
CVE-2026-113961

libpng LIBPNGLIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index

Risk 45
Severity
6.1
Buffer Overflow, Use After Free, Input Validation, Null Pointer Dereference, Race Condition, Integer Overflow
AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

802.1X. An authentication issue was addressed with improved state management.

1 / 44
Source: Apple
First published (updated )
CVE-2025-64505

Apple macOS Golden GateInput Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Path Traversal

Risk 69
Severity
7.8
Input Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Path Traversal
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 131
Source: Apple
First published (updated )
CVE-2026-86958

Apple macOS TahoeInput Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free, Integer Overflow

Risk 57
Severity
8.2
Input Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free, Integer Overflow
AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.

1 / 233
Source: MITRE
First published (updated )
CVE-2026-112555

Python PythonInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow

Risk 30
Severity
5.3
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 97
Source: Apple
First published (updated )
CVE-2023-27043

Apple macOS Golden GateInput Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free

Risk 31
Severity
5.5
Input Validation, Use After Free, Null Pointer Dereference, Buffer Overflow, Race Condition, Double Free
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 85
Source: Apple
First published (updated )
CVE-2026-112523

Apple visionOSUse After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free, Path Traversal

Risk 32
Severity
5.5
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free, Path Traversal
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 162
Source: Apple
First published (updated )
CVE-2026-28850

Apple iOSUse After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Path Traversal

Risk 38
Severity
6.5
Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Path Traversal
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 49
Source: Apple
First published (updated )
CVE-2026-84613

Apple iOSUse After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Path Traversal

Risk 34
Severity
5.4
Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Path Traversal
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

1 / 67
Source: NVD
First published (updated )
CVE-2026-86913

Apple iOSInput Validation, Integer Overflow, Use After Free, Race Condition, Buffer Overflow, Path Traversal

Risk 79
Severity
8.8
Input Validation, Integer Overflow, Use After Free, Race Condition, Buffer Overflow, Path Traversal
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.

1 / 60
Source: NVD
First published (updated )
CVE-2026-86919

Apple iOSBuffer Overflow, Race Condition, Input Validation, Integer Overflow, Use After Free, Null Pointer Dereference, Path Traversal

Risk 32
Severity
5.5
Buffer Overflow, Race Condition, Input Validation, Integer Overflow, Use After Free, Null Pointer Dereference, Path Traversal
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 85
Source: Apple
First published (updated )
CVE-2026-86944

Apple iOSUse After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free, Path Traversal

Risk 38
Severity
6.5
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free, Path Traversal
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 296
Source: Apple
First published (updated )
CVE-2026-86957

Apple iOSInput Validation, Integer Overflow, Use After Free, Race Condition, Null Pointer Dereference, Buffer Overflow, Double Free, Path Traversal

Risk 22
Severity
4.3
Input Validation, Integer Overflow, Use After Free, Race Condition, Null Pointer Dereference, Buffer Overflow, Double Free, Path Traversal
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 175
Source: Apple
First published (updated )
CVE-2026-86959

Apple iOSDouble Free, Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Path Traversal

Risk 35
Severity
5.5
Double Free, Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Path Traversal
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.

1 / 160
Source: NVD
First published (updated )
CVE-2026-86962

Apple macOS TahoeBuffer Overflow, Input Validation, Integer Overflow, Race Condition, Null Pointer Dereference, Use After Free

Risk 43
Severity
7.5
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Null Pointer Dereference, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A remote attacker may be able to cause unexpected app termination.

1 / 66
Source: MITRE
First published (updated )
CVE-2026-28846

Apple macOS TahoeBuffer Overflow, Input Validation, Integer Overflow, Race Condition, Null Pointer Dereference, Use After Free

Risk 32
Severity
5.5
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Null Pointer Dereference, Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 68
Source: Apple
First published (updated )
CVE-2026-28993

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference

Risk 43
Severity
7.5
Buffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 64
Source: Apple
First published (updated )
CVE-2026-28974

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference

Risk 31
Severity
5.5
Buffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to access sensitive user data.

1 / 124
Source: MITRE
First published (updated )
CVE-2026-28996

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference

Risk 32
Severity
5.3
Buffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference
AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Wi-Fi packets.

1 / 88
Source: MITRE
First published (updated )
CVE-2026-28994

Apple macOS TahoeBuffer Overflow, Input Validation, Integer Overflow, Race Condition, Null Pointer Dereference, Use After Free, Infoleak

Risk 37
Severity
6.5
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Null Pointer Dereference, Use After Free, Infoleak
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 91
Source: Apple
First published (updated )
CVE-2026-28920

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203