Where
-Infinity
0

Trending

Last week
Last month
Last year

Apple iOSUse After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free

Risk 24
Severity
4.3
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 168
Source: Apple
First published (updated )
CVE-2026-65333

redhat/jbcs-httpd24-aprNull pointer deref in X509_issuer_and_serial_hash()

Risk 49
Severity
5.9
Null Pointer Dereference, Input Validation
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 7
Source: Ubuntu
First published (updated )
CVE-2021-23841

Apple tvOSCode Injection, Input Validation, Race Condition

Risk 75
Severity
7.8
Code Injection, Input Validation, Race Condition
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Apple Neural Engine. The issue was addressed with improved memory handling.

1 / 60
Source: Apple
First published (updated )
CVE-2024-27856

Apple SafariUse After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free, Path Traversal

Risk 34
Severity
5.4
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free, Path Traversal
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.

1 / 118
Source: NVD
First published (updated )
CVE-2026-86872

Apple SafariInput Validation, Integer Overflow, Use After Free, Race Condition, Null Pointer Dereference, Buffer Overflow, Double Free, Path Traversal

Risk 77
Severity
8.8
Input Validation, Integer Overflow, Use After Free, Race Condition, Null Pointer Dereference, Buffer Overflow, Double Free, Path Traversal
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 270
Source: NVD
First published (updated )
CVE-2026-86922

Apple iPadOSBuffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference

Risk 46
Severity
7.5
Buffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

1 / 74
Source: NVD
First published (updated )
CVE-2026-43660

Apple iPadOSInput Validation, Buffer Overflow, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow

Risk 63
Severity
8.1
Input Validation, Buffer Overflow, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 74
Source: Apple
First published (updated )
CVE-2026-28907

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference, Infoleak

Risk 43
Severity
7.5
Buffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference, Infoleak
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 76
Source: Apple
First published (updated )
CVE-2026-28962

Apple iPadOSBuffer Overflow, Input Validation, Race Condition, Integer Overflow, Use After Free, Null Pointer Dereference

Risk 83
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Integer Overflow, Use After Free, Null Pointer Dereference
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 129
Source: Apple
First published (updated )
CVE-2026-43658

Apple iPadOSBuffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow

Risk 83
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 70
Source: Apple
First published (updated )
CVE-2026-28905

Apple iPadOSApple Safari Regular Expression Duplicate Named Groups Heap-based Buffer Overflow Remote Code Execution Vulnerability

Risk 84
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 78
Source: Apple
First published (updated )
CVE-2026-28847

Apple iPadOSBuffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow

Risk 83
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 77
Source: Apple
First published (updated )
CVE-2026-28904

Apple iPadOSBuffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow

Risk 83
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 77
Source: Apple
First published (updated )
CVE-2026-28903

Apple iPadOSBuffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow

Risk 83
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 71
Source: Apple
First published (updated )
CVE-2026-28902

Apple iPadOSBuffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow

Risk 83
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 77
Source: Apple
First published (updated )
CVE-2026-28953

Apple iPadOSBuffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow

Risk 83
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 71
Source: Apple
First published (updated )
CVE-2026-28901

Apple iPadOSApple Safari Web Inspector WebCore Style Resolver Use-After-Free Remote Code Execution Vulnerability

Risk 84
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 78
Source: Apple
First published (updated )
CVE-2026-28955

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow

Risk 43
Severity
7.5
Buffer Overflow, Input Validation, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 71
Source: Apple
First published (updated )
CVE-2026-28913

Apple iPadOSBuffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference

Risk 83
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 71
Source: Red Hat
First published (updated )
CVE-2026-28883

Apple iPadOSBuffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference

Risk 83
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 132
Source: MITRE
First published (updated )
CVE-2026-28947

Apple macOS TahoeInput Validation, Use After Free, Buffer Overflow, Race Condition, Null Pointer Dereference, Integer Overflow

Risk 22
Severity
4.3
Input Validation, Use After Free, Buffer Overflow, Race Condition, Null Pointer Dereference, Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 79
Source: Apple
First published (updated )
CVE-2026-28917

Apple iPadOSBuffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference

Risk 83
Severity
8.8
Buffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 73
Source: Red Hat
First published (updated )
CVE-2026-28942

Apple iPadOSBuffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference, Infoleak

Risk 34
Severity
5.5
Buffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference, Infoleak
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 131
Source: Apple
First published (updated )
CVE-2026-28958

Apple macOS TahoeBuffer Overflow, Input Validation, Integer Overflow, Race Condition, Null Pointer Dereference, Use After Free

Risk 22
Severity
4.3
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Null Pointer Dereference, Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 73
Source: Apple
First published (updated )
CVE-2026-28971

Apple macOS TahoeBuffer Overflow, Input Validation, Use After Free, Race Condition, Null Pointer Dereference, Integer Overflow

Risk 43
Severity
7.5
Buffer Overflow, Input Validation, Use After Free, Race Condition, Null Pointer Dereference, Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 75
Source: Apple
First published (updated )
CVE-2026-28944

Apple SafariInput Validation, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Null Pointer Dereference

Risk 24
Severity
4.3
Input Validation, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Null Pointer Dereference
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 129
Source: Apple
First published (updated )
CVE-2026-28984

Apple SafariInput Validation, Use After Free, Buffer Overflow, Race Condition, Null Pointer Dereference, Integer Overflow

Risk 82
Severity
8.8
Input Validation, Use After Free, Buffer Overflow, Race Condition, Null Pointer Dereference, Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy.

1 / 80
Source: MITRE
First published (updated )
CVE-2026-43670

libxslt libxsltLibxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

Risk 47
Severity
7.8
EPSS
0.02%
Input Validation, Double Free, Use After Free, Race Condition
AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.

1 / 40
Source: IBM
First published (updated )
CVE-2025-7425

Apple iOSInput Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free

Risk 37
Severity
6.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 217
Source: MITRE
First published (updated )
CVE-2026-112693

Apple tvOSApple Multiple Products Buffer Overflow Vulnerability

Risk 90
Severity
8.8
Input Validation, Double Free, SQL Injection, Race Condition, Use After Free, Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 83
Source: Apple
First published (updated )
CVE-2025-31277

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203