Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.7 HIGH
CVE-2026-20620 — Apple macOS Kernel Out-of-Bounds Read Vulnerability

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4. An attacker may be able to cause unexpect…

macos | Memory Corruption
Feb 11, 2026 Feb 17, 2026
Feb 11, 2026
Feb 17, 2026
5.5 MEDIUM
CVE-2026-20619 — Apple macOS Data Exposure Vulnerability

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An app may be able to access sensitive user data.

macos | Information Disclosure
Feb 11, 2026 Feb 13, 2026
Feb 11, 2026
Feb 13, 2026
5.5 MEDIUM
CVE-2026-20618 — "macOS App Data Exposure"

An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app may be able to access user-sensitive data.

macos | Information Disclosure
Feb 11, 2026 Feb 18, 2026
Feb 11, 2026
Feb 18, 2026
7.0 HIGH
CVE-2026-20617 — Apple WatchOS and iOS Root Privilege Escalation

A race condition was addressed with improved state handling. This issue is fixed in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, visionOS 26.3, iOS 26.3 and iPadOS 26.3. An app may…

Feb 11, 2026 Feb 25, 2026
Feb 11, 2026
Feb 25, 2026
7.8 HIGH
CVE-2026-20616 — Apple iOS Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3, macOS Sonoma 14.8.4, visionOS 26.3. Processing a malic…

macos iphone_os ipados visionos | Memory Corruption
Feb 11, 2026 Feb 17, 2026
Feb 11, 2026
Feb 17, 2026
7.8 HIGH
CVE-2026-20615 — "iOS Apple Secure Path Handling Vulnerability"

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, visionOS 26.3. An app may be able to gain root pr…

macos iphone_os ipados visionos | Path Traversal
Feb 11, 2026 Feb 25, 2026
Feb 11, 2026
Feb 25, 2026
7.8 HIGH
CVE-2026-20614 — Apple macOS Path Handling Privilege Escalation Vulnerability

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4. An app may be able to gain root privileges.

macos | Path Traversal
Feb 11, 2026 Feb 25, 2026
Feb 11, 2026
Feb 25, 2026
5.5 MEDIUM
CVE-2026-20612 — Apple macOS Sensitive User Data Access Vulnerability

A privacy issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4. An app may be able to access sensitive user data.

macos | Information Disclosure
Feb 11, 2026 Feb 13, 2026
Feb 11, 2026
Feb 13, 2026
7.1 HIGH
CVE-2026-20611 — Apple Media File Processing Out-of-Bounds Access Vulnerability

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 and …

macos iphone_os tvos watchos ipados visionos | Memory Corruption
Feb 11, 2026 Feb 13, 2026
Feb 11, 2026
Feb 13, 2026
7.8 HIGH
CVE-2026-20610 — Apple macOS Tahoe Symbolic Link Privilege Escalation

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.3. An app may be able to gain root privileges.

macos | Authorization
Feb 11, 2026 Feb 13, 2026
Feb 11, 2026
Feb 13, 2026
4.4 MEDIUM
CVE-2026-20609 — Apple WatchOS Memory Corruption Denial of Service

The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 and iPadOS 18.7.5, visio…

macos iphone_os tvos watchos ipados visionos | Memory Corruption
Feb 11, 2026 Feb 13, 2026
Feb 11, 2026
Feb 13, 2026
5.5 MEDIUM
CVE-2026-20608 — Apple Safari Web Content Processing Crash

This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26.3, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3, Safari 26.3. Processing mal…

macos iphone_os safari ipados visionos | Denial of Service
Feb 11, 2026 Feb 13, 2026
Feb 11, 2026
Feb 13, 2026
7.1 HIGH
CVE-2026-20606 — Apple macOS and iOS Privacy Preference Bypass Vulnerability

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. A…

Feb 11, 2026 Feb 13, 2026
Feb 11, 2026
Feb 13, 2026
4.6 MEDIUM
CVE-2026-20605 — Apple macOS App Crash Vulnerability

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.4, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3, macOS Sonoma 14.8.4. An app may be able to crash a …

macos iphone_os ipados | Memory Corruption
Feb 11, 2026 Feb 13, 2026
Feb 11, 2026
Feb 13, 2026
4.4 MEDIUM
CVE-2026-20603 — Apple macOS Root Privilege Privilege Escalation

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Tahoe 26.3. An app with root privileges may be able to access private information.

macos | Information Disclosure
Feb 11, 2026 Feb 18, 2026
Feb 11, 2026
Feb 18, 2026
5.5 MEDIUM
CVE-2026-20602 — Apple macOS Denial-of-Service Vulnerability

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4. An app may be able to cause a denial-of-service.

macos | Denial of Service
Feb 11, 2026 Feb 18, 2026
Feb 11, 2026
Feb 18, 2026
3.3 LOW
CVE-2026-20601 — Apple macOS Keylogger Vulnerability

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to monitor keystrokes without user permission.

macos | Authorization
Feb 11, 2026 Mar 04, 2026
Feb 11, 2026
Mar 04, 2026
7.5 HIGH
CVE-2026-1669 — Arbitrary File Read in Keras via HDF5 External Datasets

Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensi…

keras | Remote | Path Traversal
Feb 11, 2026 Feb 26, 2026
Feb 11, 2026
Feb 26, 2026
9.8 CRITICAL
CVE-2025-67135 — PGST PG107 Alarm System Replay Attack Vulnerability

Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack.

Remote | Authentication
Feb 11, 2026 Feb 12, 2026
Feb 11, 2026
Feb 12, 2026
5.3 MEDIUM
CVE-2025-64074 — ZBT WE2001 Path Traversal Vulnerability

A path-traversal vulnerability in the logout functionality of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remote attackers to delete arbitrary files on the host by supplying a crafted s…

Remote | Path Traversal
Feb 11, 2026 Feb 12, 2026
Feb 11, 2026
Feb 12, 2026
Showing 20 of 5087 Results