Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112608 | medium | 4.3 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 2... | 2026-11-04 |
| CVE-2026-112611 | medium | 6.1 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and... | 2026-11-04 |
| CVE-2026-112612 | medium | 6.2 | No | A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2.... | 2026-11-04 |
| CVE-2026-112619 | high | 7.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate... | 2026-11-04 |
| CVE-2026-112620 | high | 7.5 | No | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 2... | 2026-11-04 |
| CVE-2026-112621 | high | 7.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2,... | 2026-11-04 |
| CVE-2026-112622 | high | 7.5 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS... | 2026-11-04 |
| CVE-2026-112468 | medium | 5.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and... | 2026-11-04 |
| CVE-2026-112469 | high | 7.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and... | 2026-11-04 |
| CVE-2026-112483 | medium | 5.5 | No | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tah... | 2026-11-04 |
| CVE-2026-112486 | high | 7.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and... | 2026-11-04 |
| CVE-2026-112488 | medium | 5.4 | No | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadO... | 2026-11-04 |
| CVE-2026-112596 | medium | 5.5 | No | An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tv... | 2026-11-04 |
| CVE-2026-93579 | medium | 6.5 | No | A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Fee... | 2026-11-04 |
| CVE-2026-93569 | high | 8.2 | No | A flaw was found in Netty. A remote unauthenticated attacker can exploit a vulnerability in Netty's HTTP/1 to HTTP/2 conversion process. Whe... | 2026-11-04 |
| CVE-2026-93568 | high | 7.5 | No | A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT... | 2026-11-04 |
| CVE-2026-93567 | high | 7.5 | No | A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header... | 2026-11-04 |
| CVE-2026-93492 | medium | 5.3 | No | A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAX_... | 2026-11-04 |
| CVE-2026-90627 | medium | 5.5 | No | The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the contents of any local file... | 2026-11-04 |
| CVE-2026-91901 | low | 3.5 | No | Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulner... | 2026-11-04 |