Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91746 | medium | 4.3 | No | Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted... | 2026-09-17 |
| CVE-2026-91747 | low | 3.1 | No | Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain... | 2026-09-17 |
| CVE-2026-91748 | high | 8.3 | No | Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer pr... | 2026-09-17 |
| CVE-2026-65377 | medium | 5.5 | No | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27... | 2026-09-17 |
| CVE-2026-65344 | high | 7.8 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS... | 2026-09-17 |
| CVE-2026-43737 | medium | 5.5 | No | An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS... | 2026-09-17 |
| CVE-2026-43702 | high | 7.8 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequ... | 2026-09-17 |
| CVE-2026-43688 | high | 7.8 | No | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. P... | 2026-09-17 |
| CVE-2026-28938 | high | 7.5 | No | A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint t... | 2026-09-17 |
| CVE-2026-28937 | medium | 5.5 | No | This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensit... | 2026-09-17 |
| CVE-2026-28935 | high | 7.5 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe... | 2026-09-17 |
| CVE-2026-28899 | medium | 5.5 | No | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS T... | 2026-09-17 |
| CVE-2026-65408 | medium | 5.5 | No | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, mac... | 2026-09-17 |
| CVE-2026-56172 | high | 7.8 | No | Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. | 2026-09-17 |
| CVE-2026-56177 | high | 7.8 | No | Use after free in Windows Server allows an authorized attacker to elevate privileges locally. | 2026-09-17 |
| CVE-2026-62697 | high | 7.8 | No | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 2026-09-17 |
| CVE-2026-68824 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Teleme... | 2026-09-17 |
| CVE-2026-68825 | high | 7.0 | No | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 2026-09-17 |
| CVE-2026-68837 | high | 7.0 | No | Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally. | 2026-09-17 |
| CVE-2026-68847 | high | 7.0 | No | Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. | 2026-09-17 |