Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
5.4 MEDIUM
CVE-2026-86898 — Apple Safari Universal Cross-Site Scripting

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file ma…

macos iphone_os safari ipados safari macos +1 more | Remote | Cross-Site Scripting
Sep 14, 2026 Sep 18, 2026
Sep 14, 2026
Sep 18, 2026
5.5 MEDIUM
CVE-2026-86897 — Apple Safari and OS Sensitive Data Access Vulnerability

This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to…

macos iphone_os safari ipados safari macos +1 more | Authorization
Sep 14, 2026 Sep 18, 2026
Sep 14, 2026
Sep 18, 2026
7.5 HIGH
CVE-2026-86895 — Apple iOS Information Disclosure Vulnerability

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persiste…

iphone_os tvos watchos ipados watchos visionos | Remote | Information Disclosure
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
7.5 HIGH
CVE-2026-86894 — Apple macOS Sandbox Escape Vulnerability

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox.

macos macos | Remote | Authorization
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
3.3 LOW
CVE-2026-86893 — Apple iOS/iPadOS/tvOS/visionOS/watchOS Device Information Disclosure Vulnerability

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name.

Sep 14, 2026 Sep 18, 2026
Sep 14, 2026
Sep 18, 2026
5.5 MEDIUM
CVE-2026-86892 — Apple iOS and iPadOS Denial-of-Service Vulnerability

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to cause a denial-of-service.

iphone_os ipados visionos | Denial of Service
Sep 14, 2026 Sep 18, 2026
Sep 14, 2026
Sep 18, 2026
3.5 LOW
CVE-2026-86891 — Apple macOS and watchOS Bluetooth Information Disclosure Vulnerability

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, watchOS 27. An app may be able to access Blueto…

macos watchos macos watchos | Authorization
Sep 14, 2026 Sep 18, 2026
Sep 14, 2026
Sep 18, 2026
4.6 MEDIUM
CVE-2026-86890 — Apple iOS and iPadOS Lock Screen Information Disclosure Vulnerability

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensit…

iphone_os ipados | Information Disclosure
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
4.8 MEDIUM
CVE-2026-86889 — Apple macOS Improper Certificate Validation

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged netwo…

macos macos | Remote | Misconfiguration
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
3.3 LOW
CVE-2026-86888 — Apple iOS and macOS Persistent Account Identifier Information Disclosure

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may …

macos iphone_os tvos watchos ipados macos +2 more | Authorization
Sep 14, 2026 Sep 21, 2026
Sep 14, 2026
Sep 21, 2026
3.3 LOW
CVE-2026-86887 — Apple iOS, iPadOS, and visionOS Privacy Preference Bypass Vulnerability

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences.

iphone_os ipados visionos | Information Disclosure
Sep 14, 2026 Sep 21, 2026
Sep 14, 2026
Sep 21, 2026
5.5 MEDIUM
CVE-2026-86886 — Apple iOS/iPadOS/watchOS Path Traversal Vulnerability

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system f…

iphone_os watchos ipados watchos | Path Traversal
Sep 14, 2026 Sep 18, 2026
Sep 14, 2026
Sep 18, 2026
6.5 MEDIUM
CVE-2026-86885 — Apple iOS and iPadOS Input Validation Vulnerability

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination.

iphone_os ipados | Denial of Service
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
5.5 MEDIUM
CVE-2026-86884 — Apple OS Sensitive Data Access via Improper Permissions

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able to access sensitive user dat…

macos iphone_os tvos watchos ipados macos +1 more | Authorization
Sep 14, 2026 Sep 18, 2026
Sep 14, 2026
Sep 18, 2026
5.5 MEDIUM
CVE-2026-86883 — Apple iOS, iPadOS, and visionOS File Access Privacy Vulnerability

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data.

iphone_os ipados visionos | Information Disclosure
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
6.5 MEDIUM
CVE-2026-86882 — Apple ImageIO Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe …

macos iphone_os tvos watchos ipados macos +2 more | Remote | Memory Corruption
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
9.1 CRITICAL
CVE-2026-86881 — Apple OS Certificate Validation Bypass Vulnerability

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, mac…

macos iphone_os tvos watchos ipados macos +2 more | Remote | Cryptography
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
6.5 MEDIUM
CVE-2026-86879 — Apple iOS and iPadOS Denial of Service Vulnerability

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A remote attacker may be able to cause a denial-of-service.

iphone_os ipados | Remote | Denial of Service
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
5.5 MEDIUM
CVE-2026-86878 — Apple iOS and iPadOS Information Disclosure Vulnerability

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.

iphone_os ipados | Authorization
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
5.2 MEDIUM
CVE-2026-86876 — Apple Sandbox Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe …

macos iphone_os watchos ipados macos watchos +1 more | Memory Corruption
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
Showing 20 of 16436 Results