Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-56989 | medium | 6.7 | No | In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privile... | 2026-09-18 |
| CVE-2026-56992 | medium | 6.7 | No | In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with Sys... | 2026-09-18 |
| CVE-2026-84636 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watc... | 2026-09-18 |
| CVE-2026-57035 | medium | 6.7 | No | In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privile... | 2026-09-18 |
| CVE-2026-84566 | high | 7.8 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G... | 2026-09-18 |
| CVE-2026-57042 | medium | 6.7 | No | In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local es... | 2026-09-18 |
| CVE-2026-84567 | medium | 5.5 | No | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An... | 2026-09-18 |
| CVE-2026-84564 | medium | 4.3 | No | An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and... | 2026-09-18 |
| CVE-2026-58678 | high | 7.8 | No | In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with... | 2026-09-18 |
| CVE-2026-58679 | high | 8.4 | No | In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to loca... | 2026-09-18 |
| CVE-2026-57014 | high | 7.8 | No | In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check. This c... | 2026-09-18 |
| CVE-2026-58683 | high | 8.8 | No | In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code executi... | 2026-09-18 |
| CVE-2026-58691 | high | 8.4 | No | In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of pr... | 2026-09-18 |
| CVE-2026-58695 | high | 7.8 | No | In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check. This could... | 2026-09-18 |
| CVE-2026-84531 | medium | 6.2 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27.... | 2026-09-18 |
| CVE-2026-84527 | medium | 5.5 | No | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia... | 2026-09-18 |
| CVE-2026-93383 | medium | 4.3 | No | Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HT... | 2026-09-18 |
| CVE-2026-93384 | low | 3.7 | No | Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social eng... | 2026-09-18 |
| CVE-2026-93385 | medium | 6.5 | No | Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HT... | 2026-09-18 |
| CVE-2026-93386 | medium | 5.4 | No | UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to sp... | 2026-09-18 |