Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112456 | high | 7.8 | No | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and... | 2026-11-03 |
| CVE-2026-112417 | high | 7.8 | No | An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D... | 2026-11-03 |
| CVE-2026-111752 | not reported | — | No | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to... | 2026-11-03 |
| CVE-2026-111751 | not reported | — | No | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 21.... | 2026-11-03 |
| CVE-2026-104039 | medium | 5.5 | No | A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services. When handling Gener... | 2026-11-03 |
| CVE-2026-65356 | medium | 5.5 | No | An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26... | 2026-11-03 |
| CVE-2026-65372 | medium | 4.7 | No | A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7... | 2026-11-03 |
| CVE-2026-112672 | medium | 5.5 | No | The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A mal... | 2026-11-03 |
| CVE-2026-65379 | medium | 5.5 | No | The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS... | 2026-11-03 |
| CVE-2026-65396 | medium | 5.5 | No | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe... | 2026-11-03 |
| CVE-2026-121386 | high | 7.5 | No | FreeRDP before 3.32.2 contains a denial of service vulnerability in WinPR's winpr_read_png_from_buffer() and winpr_convert_from_jpeg(), whic... | 2026-11-03 |
| CVE-2026-84508 | medium | 5.5 | No | This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27,... | 2026-11-03 |
| CVE-2026-121387 | medium | 4.3 | No | FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerability in freerdp_dsp_decode_gsm610 that allows malicious RDP servers to r... | 2026-11-03 |
| CVE-2026-84547 | low | 3.5 | No | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, mac... | 2026-11-03 |
| CVE-2026-121389 | low | 3.1 | No | FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnerability in rdpdr_dump_packet that allows malicious RDP servers to abort... | 2026-11-03 |
| CVE-2026-121390 | medium | 4.3 | No | FreeRDP 3.0.0 before 3.32.2 built with WITH_AAD=ON contains a reachable assertion because its ARM gateway response parser accepts a missing... | 2026-11-03 |
| CVE-2026-121391 | medium | 4.3 | No | FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in parallel_process_irp_create that fails to close previous descriptors on... | 2026-11-03 |
| CVE-2026-121392 | high | 7.4 | No | FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tls_verify_certificate() that accepts Common Name fallbac... | 2026-11-03 |
| CVE-2026-121393 | medium | 6.5 | No | FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort clients built with ve... | 2026-11-03 |
| CVE-2026-121394 | medium | 6.5 | No | FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to terminate clie... | 2026-11-03 |