AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Changes

Severity, score, summary, fixed-version and withdrawal changes to advisories after they were first listed, newest first. The advisory itself stays; its history is kept here.

SeverityNov 10Relative path traversal in the log export commands in AWS ParallelCluster CLISeverity: Unrated to MediumAWS-2026-174AWS
SeverityNov 10Issues with Amazon Braket SDKSeverity: Unrated to MediumAWS-2026-175AWS
SummaryNov 10IBM WebSphere Application Server: request smugglingSummary: IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling. to IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling.CVE-2026-10841IBM
SummaryNov 10SAP WebClient UI: attacker could injectSummary: SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the context of the application due to to SAP WebClient UI allows an attacker to inject and execute malicious scripts in the context of the application due to the absence of a Content Security Policy (CCVE-2026-44768SAP
SummaryNov 8Microsoft Paint: out-of-bounds readSummary: Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network. to Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code locally.CVE-2026-83844Microsoft
CVSS scoreNov 8Microsoft Paint: out-of-bounds readCVSS score: 8.1 to 7CVE-2026-83844Microsoft
SeverityNov 7Issue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM...Severity: Unrated to CriticalAWS-2026-173AWS
SeverityNov 7Issues with Babelfish for Aurora PostgreSQLSeverity: Unrated to CriticalAWS-2026-166AWS
WithdrawnNov 7Rejected reason: Red Hat Product Security has been notifiedWithdrawn: none to 2026-11-06 16:17:07CVE-2026-104040Red Hat
SummaryNov 7Rejected reason: Red Hat Product Security has been notifiedSummary: A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quot to Rejected reason: Red Hat Product Security has been notified that this CVE is a duplicated of CVE-2026-104047CVE-2026-104040Red Hat
CVSS scoreNov 7Rejected reason: Red Hat Product Security has been notifiedCVSS score: 4.4 to noneCVE-2026-104040Red Hat
SeverityNov 7Rejected reason: Red Hat Product Security has been notifiedSeverity: Medium to UnratedCVE-2026-104040Red Hat
SummaryNov 7Fortinet FortiPAM Chrome Extension: information disclosureSummary: A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versi to A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.CVE-2026-84388Fortinet
SummaryNov 7Red Hat Cockpit: integer overflowSummary: A flaw was found in Cockpit. An integer overflow vulnerability in the `do_lastlog()` function, specifically in the offse to A flaw was found in Cockpit. An authenticated local user with a large user identifier (UID) can cause unauthorized modification and disclosure of login records.CVE-2026-91142Red Hat
SummaryNov 7Fortinet FortiAnalyzer: denial of serviceSummary: A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial to A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via SNMP GETBULK requests.CVE-2026-84391Fortinet
SummaryNov 7Fortinet FortiSandbox: improper access controlSummary: A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, to A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandCVE-2026-26084Fortinet
CVSS scoreNov 7Progress Software WhatsUp Gold: remote code executionCVSS score: 8.8 to 9.8CVE-2026-65941Progress Software
SeverityNov 7Progress Software WhatsUp Gold: remote code executionSeverity: High to CriticalCVE-2026-65941Progress Software
SummaryNov 7Fortinet FortiWeb: improper access controlSummary: A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7. to A incomplete list of disallowed inputs vulnerability [CWE-184] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.CVE-2026-70466Fortinet
SeverityNov 6GluonTS arbitrary file write during archive extractionSeverity: Unrated to HighAWS-2026-171AWS
SeverityNov 6APT package manager that affects Ubuntu and Debian operating systemsSeverity: Unrated to HighAWS-2026-172AWS
SeverityNov 5vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability...Severity: Unrated to HighPYSEC-2026-4361vLLM
SeverityNov 5vLLM: authenticated attacker could collide shared cache keysSeverity: Unrated to MediumPYSEC-2026-4362vLLM
SeverityNov 5Guest Access to Firecracker Process Memory After a Failed Memory DiscardSeverity: Unrated to HighAWS-2026-169AWS
SeverityNov 5Improper isolation of shared resources in aws-network-policy-agent in Amazon EKSSeverity: Unrated to HighAWS-2026-170AWS
CVSS scoreNov 5Apple iOS and iPadOS: memory corruptionCVSS score: none to 7.5CVE-2026-86992Apple
SeverityNov 5Apple iOS and iPadOS: memory corruptionSeverity: Unrated to HighCVE-2026-86992Apple
CVSS scoreNov 5Apple iOS and iPadOS: buffer overflowCVSS score: none to 7.5CVE-2026-86991Apple
SeverityNov 5Apple iOS and iPadOS: buffer overflowSeverity: Unrated to HighCVE-2026-86991Apple
CVSS scoreNov 5Apple iOS and iPadOS: improper access controlCVSS score: none to 5.1CVE-2026-86990Apple
SeverityNov 5Apple iOS and iPadOS: improper access controlSeverity: Unrated to MediumCVE-2026-86990Apple
CVSS scoreNov 5Apple iOS and iPadOS: improper authenticationCVSS score: none to 5.1CVE-2026-86989Apple
SeverityNov 5Apple iOS and iPadOS: improper authenticationSeverity: Unrated to MediumCVE-2026-86989Apple
CVSS scoreNov 5Apple Safari: use after freeCVSS score: none to 7.5CVE-2026-86986Apple
SeverityNov 5Apple Safari: use after freeSeverity: Unrated to HighCVE-2026-86986Apple
CVSS scoreNov 5Apple Safari: improper input validationCVSS score: none to 6.5CVE-2026-86985Apple
SeverityNov 5Apple Safari: improper input validationSeverity: Unrated to MediumCVE-2026-86985Apple
CVSS scoreNov 5Apple iOS and iPadOS: information disclosureCVSS score: none to 3.3CVE-2026-86978Apple
SeverityNov 5Apple iOS and iPadOS: information disclosureSeverity: Unrated to LowCVE-2026-86978Apple
CVSS scoreNov 5Apple Safari: type confusionCVSS score: none to 7.5CVE-2026-86974Apple
SeverityNov 5Apple Safari: type confusionSeverity: Unrated to HighCVE-2026-86974Apple
CVSS scoreNov 5Apple Safari: out-of-bounds readCVSS score: none to 6.5CVE-2026-86973Apple
SeverityNov 5Apple Safari: out-of-bounds readSeverity: Unrated to MediumCVE-2026-86973Apple
CVSS scoreNov 5Apple iOS and iPadOS: out-of-bounds writeCVSS score: none to 7.5CVE-2026-86969Apple
SeverityNov 5Apple iOS and iPadOS: out-of-bounds writeSeverity: Unrated to HighCVE-2026-86969Apple
CVSS scoreNov 5Apple iOS and iPadOS: improper access controlCVSS score: none to 7.5CVE-2026-86968Apple
SeverityNov 5Apple iOS and iPadOS: improper access controlSeverity: Unrated to HighCVE-2026-86968Apple
CVSS scoreNov 5Apple iOS and iPadOS: link followingCVSS score: none to 5.5CVE-2026-86966Apple
SeverityNov 5Apple iOS and iPadOS: link followingSeverity: Unrated to MediumCVE-2026-86966Apple
CVSS scoreNov 5Apple iOS and iPadOS: null pointer dereferenceCVSS score: none to 7.5CVE-2026-86964Apple
SeverityNov 5Apple iOS and iPadOS: null pointer dereferenceSeverity: Unrated to HighCVE-2026-86964Apple
CVSS scoreNov 5Apple macOS: use after freeCVSS score: none to 7.7CVE-2026-86946Apple
SeverityNov 5Apple macOS: use after freeSeverity: Unrated to HighCVE-2026-86946Apple
CVSS scoreNov 5Apple macOS: insecure permissionsCVSS score: none to 7.1CVE-2026-86945Apple
SeverityNov 5Apple macOS: insecure permissionsSeverity: Unrated to HighCVE-2026-86945Apple
CVSS scoreNov 5Apple macOS: denial of serviceCVSS score: none to 7.5CVE-2026-86943Apple
SeverityNov 5Apple macOS: denial of serviceSeverity: Unrated to HighCVE-2026-86943Apple
CVSS scoreNov 5Apple iOS and iPadOS: out-of-bounds readCVSS score: none to 5.5CVE-2026-86942Apple
SeverityNov 5Apple iOS and iPadOS: out-of-bounds readSeverity: Unrated to MediumCVE-2026-86942Apple
CVSS scoreNov 5Apple macOS: authentication bypass by spoofingCVSS score: none to 6.2CVE-2026-86941Apple
SeverityNov 5Apple macOS: authentication bypass by spoofingSeverity: Unrated to MediumCVE-2026-86941Apple
CVSS scoreNov 5Apple macOS: missing authorizationCVSS score: none to 4.9CVE-2026-86939Apple
SeverityNov 5Apple macOS: missing authorizationSeverity: Unrated to MediumCVE-2026-86939Apple
CVSS scoreNov 5Apple macOS: protection mechanism failureCVSS score: none to 5.5CVE-2026-86937Apple
SeverityNov 5Apple macOS: protection mechanism failureSeverity: Unrated to MediumCVE-2026-86937Apple
CVSS scoreNov 5Apple macOS: privilege escalationCVSS score: none to 7.8CVE-2026-86936Apple
SeverityNov 5Apple macOS: privilege escalationSeverity: Unrated to HighCVE-2026-86936Apple
CVSS scoreNov 5Apple macOS: information disclosureCVSS score: none to 6.2CVE-2026-86931Apple
SeverityNov 5Apple macOS: information disclosureSeverity: Unrated to MediumCVE-2026-86931Apple
CVSS scoreNov 5Apple macOS: information disclosureCVSS score: none to 3.3CVE-2026-86923Apple
SeverityNov 5Apple macOS: information disclosureSeverity: Unrated to LowCVE-2026-86923Apple
CVSS scoreNov 5Apple iOS and iPadOS: improper access controlCVSS score: none to 5.5CVE-2026-86880Apple
SeverityNov 5Apple iOS and iPadOS: improper access controlSeverity: Unrated to MediumCVE-2026-86880Apple
CVSS scoreNov 5Apple macOS: path traversalCVSS score: none to 6.2CVE-2026-86877Apple
SeverityNov 5Apple macOS: path traversalSeverity: Unrated to MediumCVE-2026-86877Apple
CVSS scoreNov 5Apple macOS: path traversalCVSS score: none to 9CVE-2026-84633Apple
SeverityNov 5Apple macOS: path traversalSeverity: Unrated to CriticalCVE-2026-84633Apple
CVSS scoreNov 5Apple macOS: authentication bypass by spoofingCVSS score: none to 5.5CVE-2026-84610Apple
SeverityNov 5Apple macOS: authentication bypass by spoofingSeverity: Unrated to MediumCVE-2026-84610Apple
CVSS scoreNov 5Apple macOS: out-of-bounds writeCVSS score: none to 6.5CVE-2026-84590Apple
SeverityNov 5Apple macOS: out-of-bounds writeSeverity: Unrated to MediumCVE-2026-84590Apple
CVSS scoreNov 5Apple macOS: use after freeCVSS score: none to 8.8CVE-2026-84545Apple
SeverityNov 5Apple macOS: use after freeSeverity: Unrated to HighCVE-2026-84545Apple
CVSS scoreNov 5Apple macOS: improper access controlCVSS score: none to 5.5CVE-2026-84542Apple
SeverityNov 5Apple macOS: improper access controlSeverity: Unrated to MediumCVE-2026-84542Apple
CVSS scoreNov 5Apple macOS: out-of-bounds writeCVSS score: none to 9.8CVE-2026-84539Apple
SeverityNov 5Apple macOS: out-of-bounds writeSeverity: Unrated to CriticalCVE-2026-84539Apple
CVSS scoreNov 5Apple macOS: secrets in logsCVSS score: none to 3.3CVE-2026-84528Apple
SeverityNov 5Apple macOS: secrets in logsSeverity: Unrated to LowCVE-2026-84528Apple
CVSS scoreNov 5Apple macOS: information disclosureCVSS score: none to 5.5CVE-2026-84498Apple
SeverityNov 5Apple macOS: information disclosureSeverity: Unrated to MediumCVE-2026-84498Apple
CVSS scoreNov 5Apple macOS: missing authorizationCVSS score: none to 4.4CVE-2026-65392Apple
SeverityNov 5Apple macOS: missing authorizationSeverity: Unrated to MediumCVE-2026-65392Apple
CVSS scoreNov 5Apple macOS: out-of-bounds readCVSS score: none to 7.5CVE-2026-65384Apple
SeverityNov 5Apple macOS: out-of-bounds readSeverity: Unrated to HighCVE-2026-65384Apple
CVSS scoreNov 5Apple macOS: unhandled exceptional conditionCVSS score: none to 5.5CVE-2026-65368Apple
SeverityNov 5Apple macOS: unhandled exceptional conditionSeverity: Unrated to MediumCVE-2026-65368Apple
CVSS scoreNov 5Apple macOS: authentication bypass by spoofingCVSS score: none to 5.5CVE-2026-64789Apple
SeverityNov 5Apple macOS: authentication bypass by spoofingSeverity: Unrated to MediumCVE-2026-64789Apple
CVSS scoreNov 5Apple Safari: protection mechanism failureCVSS score: none to 5.4CVE-2026-113952Apple
SeverityNov 5Apple Safari: protection mechanism failureSeverity: Unrated to MediumCVE-2026-113952Apple
CVSS scoreNov 5Apple Safari: type confusionCVSS score: none to 8.8CVE-2026-113949Apple
SeverityNov 5Apple Safari: type confusionSeverity: Unrated to HighCVE-2026-113949Apple
CVSS scoreNov 5Apple macOS: insecure permissionsCVSS score: none to 5.5CVE-2026-113948Apple
SeverityNov 5Apple macOS: insecure permissionsSeverity: Unrated to MediumCVE-2026-113948Apple
CVSS scoreNov 5Apple iOS and iPadOS: race conditionCVSS score: none to 4.7CVE-2026-113915Apple
SeverityNov 5Apple iOS and iPadOS: race conditionSeverity: Unrated to MediumCVE-2026-113915Apple
CVSS scoreNov 5Apple iOS and iPadOS: uninitialized resourceCVSS score: none to 5.5CVE-2026-113910Apple
SeverityNov 5Apple iOS and iPadOS: uninitialized resourceSeverity: Unrated to MediumCVE-2026-113910Apple
CVSS scoreNov 5Apple iOS and iPadOS: memory corruptionCVSS score: none to 8CVE-2026-113909Apple
SeverityNov 5Apple iOS and iPadOS: memory corruptionSeverity: Unrated to HighCVE-2026-113909Apple
CVSS scoreNov 5Apple iOS and iPadOS: null pointer dereferenceCVSS score: none to 6.5CVE-2026-113906Apple
SeverityNov 5Apple iOS and iPadOS: null pointer dereferenceSeverity: Unrated to MediumCVE-2026-113906Apple
CVSS scoreNov 5Apple Safari: use after freeCVSS score: none to 4.3CVE-2026-113904Apple
SeverityNov 5Apple Safari: use after freeSeverity: Unrated to MediumCVE-2026-113904Apple
CVSS scoreNov 5Apple Safari: use after freeCVSS score: none to 6.5CVE-2026-113903Apple
SeverityNov 5Apple Safari: use after freeSeverity: Unrated to MediumCVE-2026-113903Apple
CVSS scoreNov 5Apple Safari: use after freeCVSS score: none to 4.3CVE-2026-113901Apple
SeverityNov 5Apple Safari: use after freeSeverity: Unrated to MediumCVE-2026-113901Apple
CVSS scoreNov 5Apple macOS: improper input validationCVSS score: none to 5.5CVE-2026-113899Apple
SeverityNov 5Apple macOS: improper input validationSeverity: Unrated to MediumCVE-2026-113899Apple
CVSS scoreNov 5Apple iOS and iPadOS: secrets in logsCVSS score: none to 3.3CVE-2026-113898Apple
SeverityNov 5Apple iOS and iPadOS: secrets in logsSeverity: Unrated to LowCVE-2026-113898Apple
CVSS scoreNov 5Apple Safari: protection mechanism failureCVSS score: none to 10CVE-2026-113897Apple
SeverityNov 5Apple Safari: protection mechanism failureSeverity: Unrated to CriticalCVE-2026-113897Apple
CVSS scoreNov 5Apple iOS and iPadOS: out-of-bounds writeCVSS score: none to 5.5CVE-2026-112705Apple
SeverityNov 5Apple iOS and iPadOS: out-of-bounds writeSeverity: Unrated to MediumCVE-2026-112705Apple
CVSS scoreNov 5Apple macOS: information disclosureCVSS score: none to 6.5CVE-2026-112704Apple
SeverityNov 5Apple macOS: information disclosureSeverity: Unrated to MediumCVE-2026-112704Apple
CVSS scoreNov 5Apple Safari: out-of-bounds readCVSS score: none to 6.5CVE-2026-112699Apple
SeverityNov 5Apple Safari: out-of-bounds readSeverity: Unrated to MediumCVE-2026-112699Apple
CVSS scoreNov 5Apple iOS and iPadOS: memory corruptionCVSS score: none to 5.5CVE-2026-112698Apple
SeverityNov 5Apple iOS and iPadOS: memory corruptionSeverity: Unrated to MediumCVE-2026-112698Apple
CVSS scoreNov 5Apple iOS and iPadOS: out-of-bounds writeCVSS score: none to 7.8CVE-2026-112696Apple
SeverityNov 5Apple iOS and iPadOS: out-of-bounds writeSeverity: Unrated to HighCVE-2026-112696Apple
CVSS scoreNov 5Apple Safari: use after freeCVSS score: none to 4.3CVE-2026-112695Apple
SeverityNov 5Apple Safari: use after freeSeverity: Unrated to MediumCVE-2026-112695Apple
CVSS scoreNov 5Apple Safari: use after freeCVSS score: none to 6.5CVE-2026-112693Apple
SeverityNov 5Apple Safari: use after freeSeverity: Unrated to MediumCVE-2026-112693Apple
CVSS scoreNov 5Apple iOS and iPadOS: missing authorizationCVSS score: none to 5.5CVE-2026-112692Apple
SeverityNov 5Apple iOS and iPadOS: missing authorizationSeverity: Unrated to MediumCVE-2026-112692Apple
CVSS scoreNov 5Apple iOS and iPadOS: out-of-bounds writeCVSS score: none to 5.5CVE-2026-112691Apple
SeverityNov 5Apple iOS and iPadOS: out-of-bounds writeSeverity: Unrated to MediumCVE-2026-112691Apple
CVSS scoreNov 5Apple iOS and iPadOS: path traversalCVSS score: none to 10CVE-2026-112690Apple
SeverityNov 5Apple iOS and iPadOS: path traversalSeverity: Unrated to CriticalCVE-2026-112690Apple
CVSS scoreNov 5Apple iOS and iPadOS: out-of-bounds writeCVSS score: none to 8.4CVE-2026-112689Apple
SeverityNov 5Apple iOS and iPadOS: out-of-bounds writeSeverity: Unrated to HighCVE-2026-112689Apple
CVSS scoreNov 5Apple iOS and iPadOS: out-of-bounds writeCVSS score: none to 5.5CVE-2026-112687Apple
SeverityNov 5Apple iOS and iPadOS: out-of-bounds writeSeverity: Unrated to MediumCVE-2026-112687Apple
CVSS scoreNov 5Apple Safari: race conditionCVSS score: none to 3.1CVE-2026-112686Apple
SeverityNov 5Apple Safari: race conditionSeverity: Unrated to LowCVE-2026-112686Apple
CVSS scoreNov 5Apple Safari: unhandled exceptional conditionCVSS score: none to 4.3CVE-2026-112684Apple
SeverityNov 5Apple Safari: unhandled exceptional conditionSeverity: Unrated to MediumCVE-2026-112684Apple
CVSS scoreNov 5Apple iOS and iPadOS: out-of-bounds writeCVSS score: none to 7.8CVE-2026-112683Apple
SeverityNov 5Apple iOS and iPadOS: out-of-bounds writeSeverity: Unrated to HighCVE-2026-112683Apple
CVSS scoreNov 5Apple iOS and iPadOS: improper input validationCVSS score: none to 7.5CVE-2026-112682Apple
SeverityNov 5Apple iOS and iPadOS: improper input validationSeverity: Unrated to HighCVE-2026-112682Apple
CVSS scoreNov 5Apple Safari: out-of-bounds readCVSS score: none to 6.5CVE-2026-112680Apple
SeverityNov 5Apple Safari: out-of-bounds readSeverity: Unrated to MediumCVE-2026-112680Apple
CVSS scoreNov 5Apple iOS and iPadOS: use after freeCVSS score: none to 7.5CVE-2026-112679Apple
SeverityNov 5Apple iOS and iPadOS: use after freeSeverity: Unrated to HighCVE-2026-112679Apple
CVSS scoreNov 5Apple iOS and iPadOS: missing authorizationCVSS score: none to 7.5CVE-2026-112676Apple
SeverityNov 5Apple iOS and iPadOS: missing authorizationSeverity: Unrated to HighCVE-2026-112676Apple
CVSS scoreNov 5Apple Safari: type confusionCVSS score: none to 4.3CVE-2026-112673Apple
SeverityNov 5Apple Safari: type confusionSeverity: Unrated to MediumCVE-2026-112673Apple
CVSS scoreNov 5The issue was addressed with improved checksCVSS score: none to 5.5CVE-2026-112672Apple
SeverityNov 5The issue was addressed with improved checksSeverity: Unrated to MediumCVE-2026-112672Apple
CVSS scoreNov 5Apple iOS and iPadOS: resource exhaustionCVSS score: none to 7.5CVE-2026-112671Apple
SeverityNov 5Apple iOS and iPadOS: resource exhaustionSeverity: Unrated to HighCVE-2026-112671Apple
CVSS scoreNov 5Apple macOS: out-of-bounds writeCVSS score: none to 7.8CVE-2026-112670Apple
SeverityNov 5Apple macOS: out-of-bounds writeSeverity: Unrated to HighCVE-2026-112670Apple
CVSS scoreNov 5Apple Safari: race conditionCVSS score: none to 6.5CVE-2026-112669Apple
SeverityNov 5Apple Safari: race conditionSeverity: Unrated to MediumCVE-2026-112669Apple
CVSS scoreNov 5Apple macOS: privilege escalationCVSS score: none to 7.8CVE-2026-112668Apple
SeverityNov 5Apple macOS: privilege escalationSeverity: Unrated to HighCVE-2026-112668Apple
CVSS scoreNov 5Apple Safari: use after freeCVSS score: none to 4.3CVE-2026-112666Apple
SeverityNov 5Apple Safari: use after freeSeverity: Unrated to MediumCVE-2026-112666Apple
CVSS scoreNov 5Apple iOS and iPadOS: information disclosureCVSS score: none to 3.3CVE-2026-112665Apple
SeverityNov 5Apple iOS and iPadOS: information disclosureSeverity: Unrated to LowCVE-2026-112665Apple
CVSS scoreNov 5Apple iOS and iPadOS: improper authorizationCVSS score: none to 3.3CVE-2026-112660Apple
SeverityNov 5Apple iOS and iPadOS: improper authorizationSeverity: Unrated to LowCVE-2026-112660Apple
CVSS scoreNov 5Apple iOS and iPadOS: out-of-bounds readCVSS score: none to 3.3CVE-2026-112656Apple
SeverityNov 5Apple iOS and iPadOS: out-of-bounds readSeverity: Unrated to LowCVE-2026-112656Apple
CVSS scoreNov 5Apple Safari: use after freeCVSS score: none to 4.3CVE-2026-112654Apple
SeverityNov 5Apple Safari: use after freeSeverity: Unrated to MediumCVE-2026-112654Apple
CVSS scoreNov 5Apple Safari: use after freeCVSS score: none to 4.3CVE-2026-112653Apple
SeverityNov 5Apple Safari: use after freeSeverity: Unrated to MediumCVE-2026-112653Apple
CVSS scoreNov 5Apple iOS and iPadOS: improper certificate validationCVSS score: none to 5.5CVE-2026-112652Apple
SeverityNov 5Apple iOS and iPadOS: improper certificate validationSeverity: Unrated to MediumCVE-2026-112652Apple
CVSS scoreNov 5Apple macOS: improper authorizationCVSS score: none to 5.5CVE-2026-112647Apple
SeverityNov 5Apple macOS: improper authorizationSeverity: Unrated to MediumCVE-2026-112647Apple
CVSS scoreNov 5Apple Safari: use after freeCVSS score: none to 7.6CVE-2026-112640Apple
SeverityNov 5Apple Safari: use after freeSeverity: Unrated to HighCVE-2026-112640Apple
CVSS scoreNov 5Apple iOS and iPadOS: buffer overflowCVSS score: none to 7.5CVE-2026-112638Apple
SeverityNov 5Apple iOS and iPadOS: buffer overflowSeverity: Unrated to HighCVE-2026-112638Apple
CVSS scoreNov 5Apple iOS and iPadOS: uninitialized resourceCVSS score: none to 6.1CVE-2026-112632Apple
SeverityNov 5Apple iOS and iPadOS: uninitialized resourceSeverity: Unrated to MediumCVE-2026-112632Apple
CVSS scoreNov 5Apple iOS and iPadOS: uninitialized resourceCVSS score: none to 3.3CVE-2026-112630Apple
SeverityNov 5Apple iOS and iPadOS: uninitialized resourceSeverity: Unrated to LowCVE-2026-112630Apple
CVSS scoreNov 5Apple iOS and iPadOS: information disclosureCVSS score: none to 5.5CVE-2026-112628Apple