Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple macOS SequoiaApple macOS Improper Authentication Vulnerability

Risk 99
Severity
9.8
Exploited
Trending
Month
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

1 / 3
Source: MITRE
First published (updated )
CVE-2026-65400

Google Google ChromeOut of bounds memory access in V8

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-11645 Out of bounds memory access in V8

1 / 4
Source: Microsoft
First published (updated )
CVE-2026-11645

Adobe Acrobat ReaderAdobe Acrobat and Reader Prototype Pollution Vulnerability

Risk 92
Severity
8.6
Exploited
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-34621

Google ChromeGoogle Skia Out-of-Bounds Write Vulnerability

Risk 73
Severity
8.8
Exploited
EPSS
0.26%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-3909 Out of bounds write in Skia

1 / 4
Source: Microsoft
First published (updated )
CVE-2026-3909

Google ChromeGoogle Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

Risk 73
Severity
8.8
Exploited
EPSS
0.80%
Buffer Overflow, Code Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-3910 Inappropriate implementation in V8

1 / 4
Source: Microsoft
First published (updated )
CVE-2026-3910

Google ChromeUse after free in Dawn

Risk 73
Severity
8.8
Exploited
EPSS
0.80%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-5281 Use after free in Dawn

1 / 4
Source: Microsoft
First published (updated )
CVE-2026-5281

Apple visionOSApple Multiple Buffer Overflow Vulnerability

Risk 91
Severity
7.8
Exploited
Buffer Overflow, Use After Free, Race Condition, Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 and CVE-2025-43529 were also issued in response to this report.

1 / 21
Source: MITRE
First published (updated )
CVE-2026-20700

Google ChromeGoogle Chromium CSS Use-After-Free Vulnerability

Risk 74
Severity
8.8
Exploited
EPSS
0.53%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-2441 Use after free in CSS

1 / 4
Source: Microsoft
First published (updated )
CVE-2026-2441

Apple Multiple ProductsApple Multiple Products Use-After-Free WebKit Vulnerability

Risk 95
Severity
8.8
Exploited
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management.

1 / 76
Source: Red Hat
First published (updated )
CVE-2025-43529

Google ChromeOut of bounds memory access in ANGLE

Risk 95
Severity
8.8
Exploited
Trending
Year
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 77
Source: Apple
First published (updated )
CVE-2025-14174

Apple WatchOSApple Multiple Products Classic Buffer Overflow Vulnerability

Risk 65
Severity
7.1
Exploited
Use After Free, Race Condition, Input Validation, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may be able to cause unexpected system termination or write kernel memory.

1 / 56
Source: MITRE
First published (updated )
CVE-2025-43520

Apple WatchOSApple Multiple Products Improper Locking Vulnerability

Risk 88
Severity
7.8
Exploited
Use After Free, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpected changes in memory shared between processes.

1 / 55
Source: MITRE
First published (updated )
CVE-2025-43510

Apple macOS SequoiaApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
Trending
Year
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

1 / 3
Source: MITRE
First published (updated )
CVE-2025-43300

Apple tvOSApple Multiple Products Buffer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Double Free, SQL Injection, Race Condition, Use After Free, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 81
Source: Apple
First published (updated )
CVE-2025-31277

Microsoft Edge (Chromium-based)Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Risk 75
Severity
8.8
Exploited
EPSS
0.08%
Input Validation, Use After Free, Race Condition, Double Free, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 89
Source: Apple
First published (updated )
CVE-2025-6558

SQLite SQLiteInteger Truncation on SQLite

Risk 79
Severity
7.2
Exploited
EPSS
0.05%
SQL Injection, Input Validation, Buffer Overflow, Race Condition, Double Free, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 183
Source: Apple
First published (updated )
CVE-2025-6965

Google ChromeGoogle Chromium V8 Type Confusion Vulnerability

Risk 65
Severity
8.1
Exploited
EPSS
0.25%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Chromium: CVE-2025-6554 Type Confusion in V8

1 / 4
Source: Microsoft
First published (updated )
CVE-2025-6554

Apple tvOSApple Multiple Products Memory Corruption Vulnerability

Risk 99
Severity
9.8
Exploited
Zeroday
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS released before iOS 18.4.1.

1 / 5
Source: MITRE
First published (updated )
CVE-2025-31200

Apple tvOSApple Multiple Products Arbitrary Read and Write Vulnerability

Risk 99
Severity
9.8
Exploited
Zeroday
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.

1 / 4
Source: CISA
First published (updated )
CVE-2025-31201

macOSBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free, Integer Overflow, Race Condition

Risk 91
Severity
7.8
Exploited
Zeroday
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to execute arbitrary code with kernel privileges.

1 / 130
Source: MITRE
First published (updated )
CVE-2025-24228

Apple iPadOSUse After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Buffer Overflow

Risk 99
Severity
9.8
Exploited
Zeroday
Use After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 85
Source: Apple
First published (updated )
CVE-2025-24178

Apple SafariUse After Free, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Race Condition

Risk 65
Severity
4.3
Exploited
Zeroday
EPSS
0.04%
Use After Free, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 159
Source: MITRE
First published (updated )
CVE-2025-30427

Apple SafariDouble Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition

Risk 91
Severity
7.8
Exploited
Zeroday
Double Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 189
Source: Apple
First published (updated )
CVE-2025-24213

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 86
Severity
9.8
Exploited
Zeroday
EPSS
0.10%
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 86
Source: Apple
First published (updated )
CVE-2025-31182

macOSUse After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow

Risk 91
Severity
7.8
Exploited
Zeroday
Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.

1 / 49
Source: MITRE
First published (updated )
CVE-2025-24267

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203