Filtered by vendor Apple Subscriptions
Filtered by product Macos Subscriptions

Search

Switch to Advanced Search (Beta)
Total 7168 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-4166 7 Apple, Debian, Fedoraproject and 4 more 8 Mac Os X, Macos, Debian Linux and 5 more 2026-10-08 7.1 High
vim is vulnerable to Out-of-bounds Read
CVE-2021-39537 2 Apple, Invisible-island 3 Mac Os X, Macos, Ncurses 2026-10-08 8.8 High
An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.
CVE-2020-14155 7 Apple, Gitlab, Netapp and 4 more 22 Macos, Gitlab, Active Iq Unified Manager and 19 more 2026-10-08 5.3 Medium
libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
CVE-2022-0351 3 Apple, Debian, Vim 3 Macos, Debian Linux, Vim 2026-10-08 7.8 High
Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
CVE-2026-106274 2 Apple, Google 2 Macos, Chrome 2026-10-08 8.8 High
Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106296 2 Apple, Google 2 Macos, Chrome 2026-10-08 5.4 Medium
Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106231 2 Apple, Google 2 Macos, Chrome 2026-10-07 4.7 Medium
Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2023-41074 4 Apple, Debian, Fedoraproject and 1 more 10 Ipados, Iphone Os, Macos and 7 more 2026-10-07 8.8 High
The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.
CVE-2026-58649 3 Apple, Linux, Microsoft 9 Macos, Linux Kernel, .net and 6 more 2026-10-07 6.5 Medium
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-106378 2 Apple, Google 2 Macos, Chrome 2026-10-07 8.3 High
Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106298 2 Apple, Google 2 Macos, Chrome 2026-10-07 9.6 Critical
Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106316 2 Apple, Google 2 Macos, Chrome 2026-10-07 5.4 Medium
UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)
CVE-2026-106409 2 Apple, Google 2 Macos, Chrome 2026-10-07 8.3 High
Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-106412 2 Apple, Google 2 Macos, Chrome 2026-10-07 8.3 High
Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106251 2 Apple, Google 2 Macos, Chrome 2026-10-07 5.4 Medium
UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)
CVE-2026-70341 3 Apple, Linux, Microsoft 5 Macos, Linux Kernel, Edge and 2 more 2026-10-06 8.5 High
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
CVE-2026-86950 1 Apple 4 Ios And Ipados, Ipados, Iphone Os and 1 more 2026-10-01 8.8 High
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.
CVE-2025-6558 5 Apple, Debian, Google and 2 more 10 Ipados, Iphone Os, Macos and 7 more 2026-10-01 8.8 High
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-95371 2 Apple, Google 2 Macos, Chrome 2026-09-30 5.4 Medium
Missing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-95296 2 Apple, Google 2 Macos, Chrome 2026-09-30 4.3 Medium
Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)