194 CVEs — updated 2026-11-02 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-61620 | HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other a | CRITICAL | 9.8 | 33%ile | NVD | 2026-10-30 |
| CVE-2026-118309 | Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to poten | CRITICAL | 9.6 | 24%ile | NVD | 2026-10-27 |
| CVE-2026-118310 | Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to po | CRITICAL | 9.6 | 24%ile | NVD | 2026-10-27 |
| CVE-2026-118316 | Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute | CRITICAL | 9.6 | 22%ile | NVD | 2026-10-27 |
| CVE-2026-118321 | Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to pot | CRITICAL | 9.6 | 29%ile | NVD | 2026-10-27 |
| CVE-2026-118332 | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentiall | CRITICAL | 9.6 | 22%ile | NVD | 2026-10-27 |
| CVE-2026-118355 | Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially ex | CRITICAL | 9.6 | 22%ile | NVD | 2026-10-27 |
| CVE-2026-119261 | Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execu | CRITICAL | 9.6 | 21%ile | NVD | 2026-10-30 |
| CVE-2026-113020 | Chromium CVE-2026-113020: Improper input validation | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113023 | Chromium CVE-2026-113023: Improper input validation | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113078 | Chromium CVE-2026-113078: Improper input validation | CRITICAL | 9.6 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113084 | Chromium CVE-2026-113084: Improper input validation | CRITICAL | 9.6 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113089 | Chromium CVE-2026-113089: Improper input validation | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113235 | Chromium CVE-2026-113235: Improper input validation | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113252 | Chromium CVE-2026-113252: Improper input validation | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113328 | Chromium CVE-2026-113328: Improper input validation | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-91738 | Chromium CVE-2026-91738: Improper input validation | CRITICAL | 9.6 | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-64759 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, i | HIGH | 8.8 | 39%ile | NVD | 2026-10-26 |
| CVE-2026-118304 | Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execut | HIGH | 8.8 | 20%ile | NVD | 2026-10-27 |
| CVE-2026-118314 | Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to poten | HIGH | 8.8 | 20%ile | NVD | 2026-10-27 |
| CVE-2026-118315 | Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execut | HIGH | 8.8 | 18%ile | NVD | 2026-10-27 |
| CVE-2026-118328 | Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially exe | HIGH | 8.8 | 34%ile | NVD | 2026-10-27 |
| CVE-2026-118329 | Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potent | HIGH | 8.8 | 33%ile | NVD | 2026-10-27 |
| CVE-2026-118331 | Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially ex | HIGH | 8.8 | 28%ile | NVD | 2026-10-27 |
| CVE-2026-118335 | Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to pote | HIGH | 8.8 | 18%ile | NVD | 2026-10-27 |
| CVE-2026-118336 | Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially e | HIGH | 8.8 | 25%ile | NVD | 2026-10-27 |
| CVE-2026-118343 | Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentiall | HIGH | 8.8 | 18%ile | NVD | 2026-10-27 |
| CVE-2026-118348 | Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execu | HIGH | 8.8 | 28%ile | NVD | 2026-10-27 |
| CVE-2026-118354 | Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execu | HIGH | 8.8 | 18%ile | NVD | 2026-10-27 |
| CVE-2026-119262 | Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute | HIGH | 8.8 | 21%ile | NVD | 2026-10-30 |
| CVE-2026-119270 | Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potential | HIGH | 8.8 | 17%ile | NVD | 2026-10-30 |
| CVE-2026-65874 | This issue affects Apache Fineract versions up to and including 1.15.0. The Center read endpoint (GET /api/v1/centers) a | HIGH | 8.8 | 20%ile | NVD | 2026-10-30 |
| CVE-2026-63339 | IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authentica | HIGH | 8.8 | 19%ile | NVD | 2026-10-30 |
| CVE-2026-113012 | Chromium CVE-2026-113012: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113016 | Chromium CVE-2026-113016: Improper input validation | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113040 | Chromium CVE-2026-113040: Improper input validation | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113046 | Chromium CVE-2026-113046: Improper input validation | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113060 | Chromium CVE-2026-113060: Improper input validation | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113062 | Chromium CVE-2026-113062: Improper input validation | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113063 | Chromium CVE-2026-113063: Improper input validation | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113086 | Chromium CVE-2026-113086: Improper input validation | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113099 | Chromium CVE-2026-113099: Improper input validation | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113117 | Chromium CVE-2026-113117: Improper input validation | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113120 | Chromium CVE-2026-113120: Improper input validation | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113147 | Chromium CVE-2026-113147: Improper input validation | HIGH | 8.8 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-113162 | Chromium CVE-2026-113162: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113173 | Chromium CVE-2026-113173: Improper input validation | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113175 | Chromium CVE-2026-113175: Improper input validation | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113195 | Chromium CVE-2026-113195: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113214 | Chromium CVE-2026-113214: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113230 | Chromium CVE-2026-113230: Improper input validation | HIGH | 8.8 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-113231 | Chromium CVE-2026-113231: Improper input validation | HIGH | 8.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-113244 | Chromium CVE-2026-113244: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113249 | Chromium CVE-2026-113249: Improper input validation | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113264 | Chromium CVE-2026-113264: Improper input validation | HIGH | 8.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-113289 | Chromium CVE-2026-113289: Improper input validation | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113292 | Chromium CVE-2026-113292: Improper input validation | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113294 | Chromium CVE-2026-113294: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113306 | Chromium CVE-2026-113306: Improper input validation | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113316 | Chromium CVE-2026-113316: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113334 | Chromium CVE-2026-113334: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-93434 | An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated | HIGH | 8.7 | 40%ile | NVD | 2026-10-27 |
| CVE-2026-62333 | OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x lin | HIGH | 8.7 | 34%ile | NVD | 2026-10-30 |
| CVE-2026-21157 | Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activ | HIGH | 8.3 | 1%ile | NVD | 2026-10-29 |
| CVE-2026-95276 | Chromium CVE-2026-95276: Improper input validation in Themes | HIGH | 8.3 | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-95341 | Chromium CVE-2026-95341: Improper input validation in Desktop | HIGH | 8.3 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-95381 | Chromium CVE-2026-95381: Improper input validation in Printing | HIGH | 8.3 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-115915 | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-control | HIGH | 8.1 | 52%ile | NVD | 2026-10-26 |
| CVE-2026-91917 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privileg | HIGH | 8.0 | 18%ile | NVD | 2026-10-30 |
| CVE-2026-62958 | libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host | HIGH | 7.9 | 10%ile | NVD | 2026-10-30 |
| CVE-2026-84604 | A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, ma | HIGH | 7.8 | 15%ile | NVD | 2026-10-26 |
| CVE-2026-88967 | A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-contro | HIGH | 7.7 | 22%ile | NVD | 2026-10-28 |
| CVE-2026-54455 | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior t | HIGH | 7.6 | 16%ile | NVD | 2026-10-28 |
| CVE-2026-111461 | An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabl | HIGH | 7.5 | 72%ile | NVD | 2026-10-27 |
| CVE-2026-90869 | A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress S | HIGH | 7.5 | 29%ile | NVD | 2026-10-29 |
| CVE-2026-59978 | AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated `?scrip | HIGH | 7.5 | 51%ile | NVD | 2026-10-30 |
| CVE-2026-20549 | In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation | HIGH | 7.5 | — | NVD | 2026-11-02 |
| CVE-2026-37460 | Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 all | HIGH | 7.5 | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-88771 | Citrix NetScaler: two more exploited flaws (CVE-2026-88771 + CVE-2026-88772) | HIGH | — | 100%ile | Featured | 2026-09-27 |
| CVE-2026-61618 | SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator public-instance limbs are decoded without | MEDIUM | 6.9 | 31%ile | NVD | 2026-10-30 |
| CVE-2026-62335 | OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x lin | MEDIUM | 6.9 | 32%ile | NVD | 2026-10-30 |
| CVE-2026-62337 | SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points | MEDIUM | 6.9 | 23%ile | NVD | 2026-10-30 |
| CVE-2026-112415 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2 | MEDIUM | 6.5 | 46%ile | NVD | 2026-10-26 |
| CVE-2026-113913 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26. | MEDIUM | 6.5 | 49%ile | NVD | 2026-10-26 |
| CVE-2026-88858 | A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression (uncontr | MEDIUM | 6.5 | 27%ile | NVD | 2026-10-28 |
| CVE-2026-103288 | Ghost: Authorization Bypass in Comment Like Feature | MEDIUM | 6.5 | 10%ile | GitHub | 2026-10-27 |
| CVE-2026-106185 | Chromium CVE-2026-106185: Improper input validation | MEDIUM | 6.5 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-106263 | Chromium CVE-2026-106263: Improper input validation | MEDIUM | 6.5 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-95382 | Chromium CVE-2026-95382: Improper input validation in Auth | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-37458 | Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticat | MEDIUM | 6.5 | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-118173 | MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete validation check for requ | MEDIUM | 6.1 | 23%ile | NVD | 2026-10-27 |
| CVE-2026-119210 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3 | MEDIUM | 5.9 | 23%ile | NVD | 2026-10-29 |
| CVE-2026-87099 | Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis | MEDIUM | 5.7 | 15%ile | NVD | 2026-10-28 |
| CVE-2026-112658 | This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden G | MEDIUM | 5.5 | 5%ile | NVD | 2026-10-26 |
| CVE-2026-119339 | Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata | MEDIUM | 5.5 | 6%ile | NVD | 2026-10-30 |
| CVE-2026-106299 | Chromium CVE-2026-106299: Improper input validation | MEDIUM | 5.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-95364 | Chromium CVE-2026-95364: Improper input validation in Passwords | MEDIUM | 5.4 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-118537 | A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v0_9/basic_catal | MEDIUM | 5.3 | 32%ile | NVD | 2026-10-28 |
| CVE-2026-119342 | Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.1 | MEDIUM | 5.3 | 38%ile | NVD | 2026-10-30 |
| CVE-2026-20560 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service | MEDIUM | 5.3 | — | NVD | 2026-11-02 |
| CVE-2026-20593 | In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of se | MEDIUM | 5.3 | — | NVD | 2026-11-02 |
| CVE-2026-20596 | In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of s | MEDIUM | 5.3 | — | NVD | 2026-11-02 |
| CVE-2026-68590 | In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial o | MEDIUM | 5.3 | — | NVD | 2026-11-02 |
| CVE-2026-105987 | KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an auth | MEDIUM | 5.1 | 15%ile | NVD | 2026-10-27 |
| CVE-2026-106226 | Chromium CVE-2026-106226: Improper input validation | MEDIUM | 4.2 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-21830 | HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent | LOW | 3.7 | 16%ile | NVD | 2026-10-28 |
| CVE-2026-118776 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the | LOW | 3.7 | 3%ile | NVD | 2026-10-29 |
| CVE-2026-119280 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3 | LOW | 3.7 | 23%ile | NVD | 2026-10-29 |
| CVE-2026-116671 | Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image. | LOW | 2.1 | 1%ile | NVD | 2026-10-26 |
| CVE-2026-119130 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set-path-with-query values | LOW | 2.1 | 15%ile | NVD | 2026-10-29 |
| CVE-2026-120236 | A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown function | LOW | 2.1 | 19%ile | NVD | 2026-11-01 |
| CVE-2026-120320 | A vulnerability was determined in jxxghp MoviePilot up to 3.1.2. This vulnerability affects the function WorkflowExecuto | LOW | 2.0 | — | NVD | 2026-11-02 |
| CVE-2026-46350 | dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS | LOW | — | — | GitHub | 2026-10-27 |
| CVE-2026-112414 | A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS | UNKNOWN | — | 17%ile | NVD | 2026-10-26 |
| CVE-2026-112417 | An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a mal | UNKNOWN | — | 8%ile | NVD | 2026-10-26 |
| CVE-2026-112449 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, i | UNKNOWN | — | 12%ile | NVD | 2026-10-26 |
| CVE-2026-112456 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS | UNKNOWN | — | 10%ile | NVD | 2026-10-26 |
| CVE-2026-112464 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS | UNKNOWN | — | 13%ile | NVD | 2026-10-26 |
| CVE-2026-112466 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, | UNKNOWN | — | 14%ile | NVD | 2026-10-26 |
| CVE-2026-112519 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS S | UNKNOWN | — | 12%ile | NVD | 2026-10-26 |
| CVE-2026-112540 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS S | UNKNOWN | — | 12%ile | NVD | 2026-10-26 |
| CVE-2026-112565 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 2 | UNKNOWN | — | 14%ile | NVD | 2026-10-26 |
| CVE-2026-112601 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.8.2. An app ma | UNKNOWN | — | 10%ile | NVD | 2026-10-26 |
| CVE-2026-112620 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, | UNKNOWN | — | 14%ile | NVD | 2026-10-26 |
| CVE-2026-112625 | An integer underflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, | UNKNOWN | — | 12%ile | NVD | 2026-10-26 |
| CVE-2026-112670 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2 | UNKNOWN | — | 14%ile | NVD | 2026-10-26 |
| CVE-2026-112671 | A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 2 | UNKNOWN | — | 29%ile | NVD | 2026-10-26 |
| CVE-2026-112682 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26. | UNKNOWN | — | 26%ile | NVD | 2026-10-26 |
| CVE-2026-112689 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS | UNKNOWN | — | 14%ile | NVD | 2026-10-26 |
| CVE-2026-112690 | This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 a | UNKNOWN | — | 29%ile | NVD | 2026-10-26 |
| CVE-2026-112691 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS | UNKNOWN | — | 14%ile | NVD | 2026-10-26 |
| CVE-2026-113909 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26. | UNKNOWN | — | 14%ile | NVD | 2026-10-26 |
| CVE-2026-65384 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2. | UNKNOWN | — | 16%ile | NVD | 2026-10-26 |
| CVE-2026-86964 | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, ma | UNKNOWN | — | 13%ile | NVD | 2026-10-26 |
| CVE-2026-86969 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2 | UNKNOWN | — | 14%ile | NVD | 2026-10-26 |
| CVE-2026-86970 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, | UNKNOWN | — | 14%ile | NVD | 2026-10-26 |
| CVE-2026-86985 | This issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7. | UNKNOWN | — | 8%ile | NVD | 2026-10-26 |
| CVE-2026-111551 | Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate an array, | UNKNOWN | — | 13%ile | NVD | 2026-10-28 |
| CVE-2026-111959 | Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from version 33.0.0 through to versions 57.3.1, 5 | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-93952 | Security Advisory 0183 | UNKNOWN | — | 72%ile | Arista | 2026-09-21 |
| CVE-2026-77190 | Security Advisory 0177 | UNKNOWN | — | 21%ile | Arista | 2026-09-09 |
| CVE-2026-73445 | Security Advisory 0167 | UNKNOWN | — | 29%ile | Arista | 2026-09-09 |
| CVE-2026-106206 | Chromium CVE-2026-106206: Improper input validation in Mobile | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-106331 | Chromium CVE-2026-106331: Improper input validation | UNKNOWN | — | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106353 | Chromium CVE-2026-106353: Improper input validation in Mobile | UNKNOWN | — | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106396 | Chromium CVE-2026-106396: Improper input validation | UNKNOWN | — | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-106414 | Chromium CVE-2026-106414: Improper input validation in Mobile | UNKNOWN | — | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-110916 | Chromium CVE-2026-110916: Improper input validation in Desktop | UNKNOWN | — | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-84325 | Chromium: CVE-2026-84325 Improper input validation in DataTransfer | UNKNOWN | — | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-84357 | Chromium: CVE-2026-84357 Improper input validation in Omnibox | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-85047 | Chromium CVE-2026-85047: Improper input validation in Transactions Platform | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87469 | Chromium CVE-2026-87469: Improper input validation in Extensions | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-87472 | Chromium CVE-2026-87472: Improper input validation in FedCM | UNKNOWN | — | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-87510 | Chromium CVE-2026-87510: Improper input validation in FileAPI | UNKNOWN | — | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-87553 | Chromium CVE-2026-87553: Improper input validation in SiteIsolation | UNKNOWN | — | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-87568 | Chromium CVE-2026-87568: Improper input validation in Chromium | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-87573 | Chromium CVE-2026-87573: Improper input validation in Network | UNKNOWN | — | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-87590 | Chromium CVE-2026-87590: Improper input validation in Passwords | UNKNOWN | — | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-87599 | Chromium CVE-2026-87599: Improper input validation in Interstitials | UNKNOWN | — | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-87600 | Chromium CVE-2026-87600: Improper input validation in Safebrowsing | UNKNOWN | — | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-78900 | Chromium: CVE-2026-78900 Improper input validation in Media | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-78943 | Chromium: CVE-2026-78943 Improper input validation in Editing | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-78963 | Chromium: CVE-2026-78963 Improper input validation in Media | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-78976 | Chromium: CVE-2026-78976 Improper input validation in StorageAccessAPI | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-78980 | Chromium: CVE-2026-78980 Improper input validation in ReaderMode | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79000 | Chromium: CVE-2026-79000 Improper input validation in DeviceBoundSessionCredentials | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79013 | Chromium: CVE-2026-79013 Improper input validation in Sync | UNKNOWN | — | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-79015 | Chromium: CVE-2026-79015 Improper input validation in ServiceWorker | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79025 | Chromium: CVE-2026-79025 Improper input validation in Workers | UNKNOWN | — | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-79032 | Chromium: CVE-2026-79032 Improper input validation in Network | UNKNOWN | — | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-79065 | Chromium: CVE-2026-79065 Improper input validation in Network | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-79066 | Chromium: CVE-2026-79066 Improper input validation in Navigation | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79076 | Chromium: CVE-2026-79076 Improper input validation in Sync | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-79106 | Chromium: CVE-2026-79106 Improper input validation in Input | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-79109 | Chromium: CVE-2026-79109 Improper input validation in Printing | UNKNOWN | — | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-79111 | Chromium: CVE-2026-79111 Improper input validation in Dawn | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79121 | Chromium: CVE-2026-79121 Improper input validation in Chromecast | UNKNOWN | — | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-79123 | Chromium: CVE-2026-79123 Improper input validation in NTP Footer | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-79139 | Chromium: CVE-2026-79139 Improper input validation in Media | UNKNOWN | — | 33%ile | Microsoft | 2026-08-11 |
| CVE-2026-79151 | Chromium: CVE-2026-79151 Improper input validation in Safebrowsing | UNKNOWN | — | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-79182 | Chromium: CVE-2026-79182 Improper input validation in Media | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-79192 | Chromium: CVE-2026-79192 Improper input validation in Variations | UNKNOWN | — | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-79203 | Chromium: CVE-2026-79203 Improper input validation in DevTools | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79214 | Chromium: CVE-2026-79214 Improper input validation in Preload | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-79230 | Chromium: CVE-2026-79230 Improper input validation in ANGLE | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-79243 | Chromium: CVE-2026-79243 Improper input validation in ReadingList | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-79251 | Chromium: CVE-2026-79251 Improper input validation in Network | UNKNOWN | — | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-79253 | Chromium: CVE-2026-79253 Improper input validation in Network | UNKNOWN | — | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-79255 | Chromium: CVE-2026-79255 Improper input validation in WebRTC | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-79259 | Chromium: CVE-2026-79259 Improper input validation in Safebrowsing | UNKNOWN | — | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-79260 | Chromium: CVE-2026-79260 Improper input validation in Cookies | UNKNOWN | — | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-79272 | Chromium: CVE-2026-79272 Improper input validation in FindInPage | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-12003 | CPython >3.11 Insecure Input Validation resulting in privilege escalation | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-94572 | OSSA-2026-039: HAProxy configuration injection leading to remote code execution in Octavia | UNKNOWN | — | 45%ile | OpenStack | 2026-09-21 |