Search Results (7214 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-95641 3 Adobe, Apple, Microsoft 3 Photoshop, Macos, Windows 2026-10-22 7.8 High
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-113329 2 Apple, Google 2 Macos, Chrome 2026-10-22 6.5 Medium
Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113178 2 Apple, Google 2 Macos, Chrome 2026-10-22 6.5 Medium
Memory corruption in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113165 2 Apple, Google 2 Macos, Chrome 2026-10-22 8.8 High
Use after free in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113191 2 Apple, Google 2 Macos, Chrome 2026-10-22 8.8 High
Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113282 2 Apple, Google 2 Macos, Chrome 2026-10-22 8.8 High
Use after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113312 2 Apple, Google 2 Macos, Chrome 2026-10-22 8.8 High
Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113317 2 Apple, Google 2 Macos, Chrome 2026-10-22 8.8 High
Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-86961 1 Apple 2 Ios And Ipados, Macos 2026-10-21 7.8 High
A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.
CVE-2026-84613 1 Apple 5 Ios And Ipados, Macos, Tvos and 2 more 2026-10-20 6.5 Medium
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected system termination.
CVE-2026-86871 1 Apple 1 Macos 2026-10-20 5.9 Medium
An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network file server may be able to cause unexpected system termination.
CVE-2026-86907 1 Apple 1 Macos 2026-10-20 4.4 Medium
An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.
CVE-2026-86919 1 Apple 3 Ios And Ipados, Macos, Visionos 2026-10-20 8.8 High
A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.
CVE-2026-86921 1 Apple 3 Ios And Ipados, Macos, Visionos 2026-10-20 6.2 Medium
A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.
CVE-2026-86933 1 Apple 1 Macos 2026-10-20 3.3 Low
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.
CVE-2026-86953 1 Apple 5 Ios And Ipados, Macos, Tvos and 2 more 2026-10-20 4.6 Medium
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.
CVE-2026-65372 1 Apple 1 Macos 2026-10-20 4.7 Medium
A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences.
CVE-2026-65356 1 Apple 1 Macos 2026-10-20 5.5 Medium
An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.
CVE-2026-65379 1 Apple 1 Macos 2026-10-20 5.5 Medium
The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.
CVE-2026-65396 1 Apple 1 Macos 2026-10-20 5.5 Medium
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.