Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple tvOSRace Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal, Infoleak

Risk 18
Severity
3.3
Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal, Infoleak
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 146
Source: Apple
First published (updated )
CVE-2026-84626

Apple tvOSAccessibility. This issue was addressed with improved data protection.

Risk 18
Severity
3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.

1 / 8
Source: MITRE
First published (updated )
CVE-2026-86888

Apple tvOSRace Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal, Infoleak

Risk 18
Severity
3.3
Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal, Infoleak
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 125
Source: Apple
First published (updated )
CVE-2026-84530

Apple WatchOSUse After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Path Traversal

Risk 19
Severity
3.5
Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Path Traversal
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 40
Source: Apple
First published (updated )
CVE-2026-86891

Google ChromeChromium CVE-2026-87452: Incorrect authorization in GPU

Risk 17
Severity
3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium CVE-2026-87452: Incorrect authorization in GPU

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87452

Apple iOSUse After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free

Risk 18
Severity
3.1
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 152
Source: MITRE
First published (updated )
CVE-2026-64782

Apple iOSUse After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free

Risk 18
Severity
3.1
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 162
Source: MITRE
First published (updated )
CVE-2026-64779

Apple macOS TahoeBuffer Overflow, Race Condition, Use After Free, Input Validation, Integer Overflow, Path Traversal, Double Free

Risk 14
Severity
2.4
Buffer Overflow, Race Condition, Use After Free, Input Validation, Integer Overflow, Path Traversal, Double Free
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Accounts Framework. This issue was addressed with improved data protection.

1 / 142
Source: Apple
First published (updated )
CVE-2026-64745

Apple macOS SequoiaUse After Free, Input Validation, Integer Overflow, Path Traversal, Race Condition, Null Pointer Dereference, Buffer Overflow, Double Free, Infoleak

Risk 18
Severity
3.3
Use After Free, Input Validation, Integer Overflow, Path Traversal, Race Condition, Null Pointer Dereference, Buffer Overflow, Double Free, Infoleak
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 151
Source: Apple
First published (updated )
CVE-2026-65371

Palo Alto Networks Prisma Browser Prisma Browser: Local Privilege Escalation on macOS

Risk 60
Severity
2
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges.

This issue only affects Prisma® Browser on macOS.

First published (updated )
CVE-2026-0275

Google Google ChromeHigh Insufficient validation of untrusted input in New Tab Page

Risk 17
Severity
3.1
Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-11690 Out of bounds read and write in Media

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-11691

Google Google ChromeInsufficient validation of untrusted input in Skia

Risk 18
Severity
3.1
Input Validation, Use After Free
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-11674 Use after free in Guest View

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-11675

Google Google ChromeHigh Insufficient policy enforcement in Network

Risk 17
Severity
3.1
Use After Free
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-11683 Use after free in WebCodecs

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-11684

Google Google Chrome (macOS)Insufficient validation of untrusted input in Dawn

Risk 17
Severity
3.1
Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-11685 Insufficient data validation in MediaCapture

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-11686

Google Google ChromeIncorrect security UI in Passwords

Risk 17
Severity
3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-12458 Incorrect security UI in Passwords

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-12458

Google Google ChromeInput Validation

Risk 17
Severity
3.1
Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-12017 Insufficient validation of untrusted input  Extensions

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-12017

Google ChromeInappropriate implementation in DataTransfer

Risk 17
Severity
3.1
CSRF
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-13944 Inappropriate implementation in DataTransfer

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-13944

Secure Access for macOSOut of bounds read in Secure Access MacOS clients prior to 14.50

Risk 32
Severity
2.3
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50. Attackers with control of a modified server can send a malformed packet to the client causing a denial of service.

First published (updated )
CVE-2026-33450

Google Google ChromeUninitialized Use in ANGLE

Risk 13
Severity
3.1
EPSS
0.21%
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-9944 Uninitialized Use in ANGLE

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-9944

Microsoft Edge (Chromium-based)Insufficient policy enforcement in Passwords

Risk 13
Severity
3.1
EPSS
0.01%
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-6312 Insufficient policy enforcement in Passwords

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-6312

Microsoft Edge (Chromium-based)Insufficient policy enforcement in CORS

Risk 13
Severity
3.1
EPSS
0.01%
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-6313 Insufficient policy enforcement in CORS

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-6313

Google Google ChromeInappropriate implementation in MHTML

Risk 13
Severity
3.1
EPSS
0.01%
CSRF
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-8022 Inappropriate implementation in MHTML

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-8022

Google Google ChromeRace in MHTML

Risk 13
Severity
3.1
EPSS
0.02%
Race Condition
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-7351 Race in MHTML

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-7351

Google ChromeInsufficient validation of untrusted input in Password Manager

Risk 17
Severity
3.1
Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-11251 Insufficient validation of untrusted input in Password Manager

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-11251

Google Google Chromechannel information leakage in Media

Risk 13
Severity
3.1
EPSS
0.03%
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-8017 Side-channel information leakage in Media

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-8017

Google ChromeInsufficient validation of untrusted input in WebAuthentication

Risk 17
Severity
3.1
Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-11244 Insufficient validation of untrusted input in WebAuthentication

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-11244

Google Google ChromeInappropriate implementation in ServiceWorker

Risk 13
Severity
3.1
EPSS
0.03%
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-7909 Inappropriate implementation in ServiceWorker

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-7909

Google Google ChromeInsufficient validation of untrusted input in CORS

Risk 13
Severity
3.1
EPSS
0.04%
Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-7968 Insufficient validation of untrusted input in CORS

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-7968

Google ChromeInsufficient validation of untrusted input in SiteIsolation

Risk 13
Severity
3.1
EPSS
0.04%
Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-7966 Insufficient validation of untrusted input in SiteIsolation

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-7966

Google ChromeObject corruption in Compositing

Risk 13
Severity
3.1
EPSS
0.16%
Buffer Overflow
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-8545 Object corruption in Compositing

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-8545

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203