Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-43788 | medium | 6.6 | No | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously craf... | 2026-09-15 |
| CVE-2026-86143 | high | 7.3 | No | In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks... | 2026-09-15 |
| CVE-2026-64701 | high | 7.8 | No | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious a... | 2026-09-15 |
| CVE-2026-64712 | high | 7.8 | No | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may... | 2026-09-15 |
| CVE-2026-64736 | high | 7.1 | No | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoi... | 2026-09-15 |
| CVE-2026-64753 | medium | 6.5 | No | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate... | 2026-09-15 |
| CVE-2026-65352 | medium | 4.3 | No | An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tah... | 2026-09-15 |
| CVE-2026-65355 | medium | 4.3 | No | An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.... | 2026-09-15 |
| CVE-2026-65362 | high | 7.8 | No | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may... | 2026-09-15 |
| CVE-2026-43691 | high | 7.8 | No | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 2... | 2026-09-15 |
| CVE-2026-28933 | medium | 5.5 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macO... | 2026-09-15 |
| CVE-2026-28934 | medium | 6.5 | No | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe... | 2026-09-15 |
| CVE-2026-28960 | high | 7.5 | No | A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker m... | 2026-09-15 |
| CVE-2026-43677 | medium | 6.5 | No | An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8,... | 2026-09-15 |
| CVE-2026-43687 | medium | 6.5 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G... | 2026-09-15 |
| CVE-2026-43783 | high | 7.8 | No | A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root priv... | 2026-09-15 |
| CVE-2026-43689 | high | 7.8 | No | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS... | 2026-09-15 |
| CVE-2026-43692 | high | 8.8 | No | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta... | 2026-09-15 |
| CVE-2026-43761 | medium | 6.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8,... | 2026-09-15 |
| CVE-2026-86144 | high | 7.8 | No | In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance... | 2026-09-15 |