Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-43808 | medium | 5.5 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvO... | 2026-09-17 |
| CVE-2026-65345 | medium | 5.5 | No | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS... | 2026-09-17 |
| CVE-2026-65348 | medium | 5.5 | No | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS... | 2026-09-17 |
| CVE-2026-65369 | medium | 5.5 | No | A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.... | 2026-09-17 |
| CVE-2026-84562 | medium | 4.7 | No | A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected u... | 2026-09-17 |
| CVE-2026-84586 | medium | 5.5 | No | An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, watchOS 27. A mal... | 2026-09-17 |
| CVE-2026-84593 | medium | 5.5 | No | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to cau... | 2026-09-17 |
| CVE-2026-84603 | medium | 5.5 | No | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27, watchOS 27. An app... | 2026-09-17 |
| CVE-2026-84606 | high | 7.5 | No | A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visi... | 2026-09-17 |
| CVE-2026-69294 | medium | 5.5 | No | Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose informat... | 2026-09-17 |
| CVE-2026-69315 | medium | 5.5 | No | Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to discl... | 2026-09-17 |
| CVE-2026-69339 | medium | 5.5 | No | Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to d... | 2026-09-17 |
| CVE-2026-69374 | medium | 6.5 | No | Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network. | 2026-09-17 |
| CVE-2026-69390 | medium | 5.5 | No | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. | 2026-09-17 |
| CVE-2026-92960 | critical | 10.0 | No | vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: ['*'] configuration, allowing sandbox code to read host... | 2026-09-17 |
| CVE-2026-92955 | critical | 10.0 | No | vm2 before 3.11.8 contains a sandbox escape vulnerability in NodeVM that allows attackers to access the host __proto__ getter/setter through... | 2026-09-17 |
| CVE-2026-92950 | high | 8.6 | No | vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.j... | 2026-09-17 |
| CVE-2026-92945 | medium | 4.2 | No | vm2 before 3.11.7 contains a module allowlist bypass vulnerability in isPathAllowedForModule that uses raw string prefix matching instead of... | 2026-09-17 |
| CVE-2026-92939 | critical | 9.9 | No | vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is allowed. The module is prese... | 2026-09-17 |
| CVE-2026-92934 | critical | 9.0 | No | vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateEr... | 2026-09-17 |