Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.3 HIGH
CVE-2026-64752 — Apple Image Processing Memory Corruption Arbitrary Code Execution

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lea…

macos iphone_os ipados macos visionos | Memory Corruption
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
7.1 HIGH
CVE-2026-64736 — Apple Kernel Out-of-Bounds Access Vulnerability

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 2…

macos iphone_os tvos watchos ipados macos +2 more | Memory Corruption
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
6.3 MEDIUM
CVE-2026-64717 — Apple Kernel Race Condition Vulnerability

A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, vision…

macos iphone_os tvos watchos ipados macos +2 more | Race Condition
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
5.5 MEDIUM
CVE-2026-64714 — Apple ImageIO Memory Corruption Vulnerability

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processi…

macos iphone_os ipados macos visionos | Memory Corruption
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
7.8 HIGH
CVE-2026-64712 — Apple macOS Privilege Escalation Vulnerability

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

macos macos | Authorization
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
7.8 HIGH
CVE-2026-64701 — Apple macOS Privilege Escalation Vulnerability

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.

macos macos | Authorization
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
6.5 MEDIUM
CVE-2026-53719 — Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authoriz…

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gateway…

gateway | Remote | Misconfiguration
Sep 14, 2026 Sep 30, 2026
Sep 14, 2026
Sep 30, 2026
6.4 MEDIUM
CVE-2026-53718 — Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extension-managed custom ba…

gateway | Remote | Authorization
Sep 14, 2026 Sep 25, 2026
Sep 14, 2026
Sep 25, 2026
6.5 MEDIUM
CVE-2026-53716 — Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/httpfetcher.go calls…

gateway | Remote | Denial of Service
Sep 14, 2026 Sep 30, 2026
Sep 14, 2026
Sep 30, 2026
5.3 MEDIUM
CVE-2026-53715 — Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go…

gateway | Remote | Race Condition
Sep 14, 2026 Sep 25, 2026
Sep 14, 2026
Sep 25, 2026
7.4 HIGH
CVE-2026-53714 — Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in Ga…

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, config…

gateway | Authentication
Sep 14, 2026 Sep 30, 2026
Sep 14, 2026
Sep 30, 2026
9.1 CRITICAL
CVE-2026-53713 — Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolic…

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, to_absolute_normalized_path in internal/gatewayapi/…

gateway | Remote | Path Traversal
Sep 14, 2026 Sep 30, 2026
Sep 14, 2026
Sep 30, 2026
8.8 HIGH
CVE-2026-43815 — Apple afpfs Kernel Memory Corruption Vulnerability

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious afpfs server may lead to k…

macos macos | Remote | Memory Corruption
Sep 14, 2026 Sep 18, 2026
Sep 14, 2026
Sep 18, 2026
5.5 MEDIUM
CVE-2026-43808 — Apple Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpecte…

macos iphone_os tvos watchos ipados macos +1 more | Memory Corruption
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
6.5 MEDIUM
CVE-2026-43791 — Apple macOS Arbitrary File Read Vulnerability

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to read arbitrary files.

macos macos | Remote | Path Traversal
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
9.1 CRITICAL
CVE-2026-43790 — Apple macOS Kernel Memory Corruption Vulnerability

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause unexpected system term…

macos macos | Remote | Memory Corruption
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
7.5 HIGH
CVE-2026-43789 — macOS Sandbox Restriction Bypass

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.

macos macos | Remote | Authorization
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
6.6 MEDIUM
CVE-2026-43788 — macOS Integer Overflow Vulnerability

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service or potentially dis…

macos macos | Denial of Service
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
5.9 MEDIUM
CVE-2026-43787 — Apple macOS Information Disclosure Vulnerability

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to leak s…

macos macos | Remote | Information Disclosure
Sep 14, 2026 Sep 17, 2026
Sep 14, 2026
Sep 17, 2026
7.8 HIGH
CVE-2026-43786 — macOS Privilege Escalation Vulnerability

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

macos macos | Authorization
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
Showing 20 of 16393 Results