Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112704 | medium | 6.5 | No | An information leakage was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS... | 2026-11-03 |
| CVE-2026-112417 | high | 7.8 | No | An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D... | 2026-11-03 |
| CVE-2026-111752 | not reported | — | No | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to... | 2026-11-03 |
| CVE-2026-65356 | medium | 5.5 | No | An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26... | 2026-11-03 |
| CVE-2026-65372 | medium | 4.7 | No | A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7... | 2026-11-03 |
| CVE-2026-112672 | medium | 5.5 | No | The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A mal... | 2026-11-03 |
| CVE-2026-65379 | medium | 5.5 | No | The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS... | 2026-11-03 |
| CVE-2026-65396 | medium | 5.5 | No | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe... | 2026-11-03 |
| CVE-2026-84508 | medium | 5.5 | No | This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27,... | 2026-11-03 |
| CVE-2026-121387 | medium | 4.3 | No | FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerability in freerdp_dsp_decode_gsm610 that allows malicious RDP servers to r... | 2026-11-03 |
| CVE-2026-84547 | low | 3.5 | No | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, mac... | 2026-11-03 |
| CVE-2026-121389 | low | 3.1 | No | FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnerability in rdpdr_dump_packet that allows malicious RDP servers to abort... | 2026-11-03 |
| CVE-2026-121391 | medium | 4.3 | No | FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in parallel_process_irp_create that fails to close previous descriptors on... | 2026-11-03 |
| CVE-2026-121392 | high | 7.4 | No | FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tls_verify_certificate() that accepts Common Name fallbac... | 2026-11-03 |
| CVE-2026-121393 | medium | 6.5 | No | FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort clients built with ve... | 2026-11-03 |
| CVE-2026-121395 | medium | 6.5 | No | FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR assertions are enabl... | 2026-11-03 |
| CVE-2026-121396 | medium | 4.3 | No | FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rts_read_auth_verifier trigger... | 2026-11-03 |
| CVE-2026-120754 | low | 3.3 | No | HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c. The decode path... | 2026-11-03 |
| CVE-2026-84579 | high | 8.8 | No | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening... | 2026-11-03 |
| CVE-2026-120755 | medium | 5.5 | No | HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in src/H5Zszip.c. When decoding a szip-compressed chun... | 2026-11-03 |