CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-113907A buffer overflow issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112642An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-113950An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112707A privacy issue was addressed by moving sensitive data to a protected location.Apple iOS and iPadOS
- CVE-2026-112510An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2026-112455An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112639A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-112547A type confusion issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2026-112681This issue was addressed with additional entitlement checks.Apple iOS and iPadOS
- CVE-2026-112551An authorization issue was addressed with improved state management.Apple macOS
- CVE-2026-112414A stack overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2026-112697A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-112678A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-84599The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-112506A permissions issue was addressed with improved validation.Apple macOS
- CVE-2026-112443The issue was addressed with improved memory handling.Apple macOS
- CVE-2026-113897This issue was addressed by removing the vulnerable code.Apple Safari · Apple iOS and iPadOS +2
- CVE-2026-116504TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injectionTOTOLINK A950RG
- CVE-2026-116579Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)crossbario autobahn-python · autobahn
- CVE-2026-116578Tornado: Open redirect in RedirectHandler via protocol-relative URLstornadoweb tornado · tornado
- CVE-2026-116577Tornado: Quadratic CPU usage when parsing HTTP headers with line foldingtornadoweb tornado · tornado
- CVE-2026-116576systeminformation: Windows command injection in services() through Unicode quotation markssebhildebrandt systeminformation · systeminformation
- CVE-2026-116502turboderp-org ExLlamaV2 GPTQ Index q_matrix.cu make_sequential out-of-bounds writeturboderp-org ExLlamaV2
- CVE-2026-116575Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)mem0ai mem0 · mem0ai
- CVE-2026-116671Infinite loop in Xpdf due to missing validation in JPEG 2000 decoderXpdf
- CVE-2026-116482subhajitkhan online-clinic-management-system patientregistration.php cross site scriptingsubhajitkhan online-clinic-management-system
- CVE-2026-70382Stored Cross-Site Scripting in Web InterfaceWolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cy… +2
- CVE-2026-65630Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in josepotatosalad jose · jose
- CVE-2026-65632ECDSA signature length is not validated in jose, allowing signature malleabilitypotatosalad jose · jose
- CVE-2026-65631erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of servicepotatosalad jose · jose