Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
5.5 MEDIUM
CVE-2026-65345 — Apple iOS, iPadOS, and macOS Sensitive Data Access Permission Bypass

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An a…

macos iphone_os ipados macos | Authorization
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
7.8 HIGH
CVE-2026-65344 — Apple Software Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe …

macos iphone_os tvos ipados macos visionos | Memory Corruption
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
7.5 HIGH
CVE-2026-65342 — Apple macOS Sensitive User Data Access Vulnerability

A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

macos macos | Remote | Authorization
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
7.8 HIGH
CVE-2026-64790 — Apple macOS Path Traversal Privilege Escalation

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain elevated privileges.

macos macos | Path Traversal
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
7.5 HIGH
CVE-2026-64761 — Apple iOS and iPadOS Privacy Bypass Vulnerability

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has installed.

iphone_os ipados | Remote | Information Disclosure
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
5.5 MEDIUM
CVE-2026-64756 — Apple iOS and macOS Path Traversal Vulnerability

A path handling issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access use…

macos iphone_os ipados macos | Path Traversal
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
6.5 MEDIUM
CVE-2026-64753 — Apple Safari Sensitive Information Disclosure Vulnerability

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing malicious…

macos iphone_os tvos watchos safari ipados +4 more | Remote | Authorization
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
7.3 HIGH
CVE-2026-64752 — Apple Image Processing Memory Corruption Arbitrary Code Execution

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lea…

macos iphone_os ipados macos visionos | Memory Corruption
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
7.1 HIGH
CVE-2026-64736 — Apple Kernel Out-of-Bounds Access Vulnerability

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 2…

macos iphone_os tvos watchos ipados macos +2 more | Memory Corruption
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
6.3 MEDIUM
CVE-2026-64717 — Apple Kernel Race Condition Vulnerability

A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, vision…

macos iphone_os tvos watchos ipados macos +2 more | Race Condition
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
5.5 MEDIUM
CVE-2026-64714 — Apple ImageIO Memory Corruption Vulnerability

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processi…

macos iphone_os ipados macos visionos | Memory Corruption
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
7.8 HIGH
CVE-2026-64712 — Apple macOS Privilege Escalation Vulnerability

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

macos macos | Authorization
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
7.8 HIGH
CVE-2026-64701 — Apple macOS Privilege Escalation Vulnerability

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.

macos macos | Authorization
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
6.5 MEDIUM
CVE-2026-53719 — Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authoriz…

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gateway…

gateway | Remote | Misconfiguration
Sep 14, 2026 Sep 30, 2026
Sep 14, 2026
Sep 30, 2026
6.4 MEDIUM
CVE-2026-53718 — Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extension-managed custom ba…

gateway | Remote | Authorization
Sep 14, 2026 Sep 25, 2026
Sep 14, 2026
Sep 25, 2026
6.5 MEDIUM
CVE-2026-53716 — Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/httpfetcher.go calls…

gateway | Remote | Denial of Service
Sep 14, 2026 Sep 30, 2026
Sep 14, 2026
Sep 30, 2026
5.3 MEDIUM
CVE-2026-53715 — Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go…

gateway | Remote | Race Condition
Sep 14, 2026 Sep 25, 2026
Sep 14, 2026
Sep 25, 2026
7.4 HIGH
CVE-2026-53714 — Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in Ga…

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, config…

gateway | Authentication
Sep 14, 2026 Sep 30, 2026
Sep 14, 2026
Sep 30, 2026
9.1 CRITICAL
CVE-2026-53713 — Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolic…

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, to_absolute_normalized_path in internal/gatewayapi/…

gateway | Remote | Path Traversal
Sep 14, 2026 Sep 30, 2026
Sep 14, 2026
Sep 30, 2026
8.8 HIGH
CVE-2026-43815 — Apple afpfs Kernel Memory Corruption Vulnerability

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious afpfs server may lead to k…

macos macos | Remote | Memory Corruption
Sep 14, 2026 Sep 18, 2026
Sep 14, 2026
Sep 18, 2026
Showing 20 of 16385 Results