Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-64698
Critical · 9.8
CWE-119 Jul 27, 2026
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2026-64697
Critical · 9.8
CWE-119 Jul 27, 2026
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-64696
Critical · 9.8
CWE-119 Jul 27, 2026
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-64695
Critical · 9.8
CWE-119 Jul 27, 2026
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43810
Critical · 9.8
CWE-119 Jul 27, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43767
Medium · 5.0
CWE-119 Jul 27, 2026
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43733
High · 7.8
CWE-119 Jul 27, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a maliciously crafted image may corrupt process memory.
CVE-2026-43729
High · 7.8
CWE-119 Jul 27, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. Processing a maliciously crafted image may corrupt process memory.
CVE-2026-43711
High · 7.8
CWE-119 Jul 27, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Ipados
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination.
CVE-2026-43710
Critical · 9.8
CWE-119 Jul 27, 2026
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43694
Critical · 9.8
CWE-119 Jul 27, 2026
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2026-43682
Critical · 9.8
CWE-119 Jul 27, 2026
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43673
High · 7.8
CWE-119 Jul 27, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Ipados
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted audio file may corrupt process memory.
CVE-2026-39877
High · 7.8
CWE-119 Jul 27, 2026
A memory corruption issue was addressed with improved memory handling. This issue is fixed in...
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to disclose kernel memory.
CVE-2026-39873
Critical · 9.8
CWE-119 Jul 27, 2026
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to unexpected system termination.
CVE-2026-28911
Critical · 9.8
CWE-119 Jul 27, 2026
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8...
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.
CVE-2026-28896
High · 7.7
CWE-119 Jul 27, 2026
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker may be able to cause unexpected system termination or read kernel memory.
CVE-2026-17512
Low · 3.3
CWE-119 Jul 27, 2026
ggml-org whisper.cpp log_mel_spectrogram out-of-bounds
A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The pull request to fix this issue awaits acceptance.
CVE-2026-16412
Critical · 9.8
CWE-119 Jul 21, 2026
Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153
Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16411
Critical · 9.8
CWE-119 Jul 21, 2026
Memory safety bugs fixed in Firefox 153
Memory safety bugs present in Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16393
Critical · 9.1
CWE-119 Jul 21, 2026
Incorrect boundary conditions in the Graphics: WebGPU component
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16368
Critical · 9.8
CWE-119 Jul 21, 2026
Incorrect boundary conditions in the JavaScript: WebAssembly component
Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16367
Critical · 10.0
CWE-119 Jul 21, 2026
Sandbox escape due to invalid pointer in the Disability Access APIs component
Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16364
Critical · 9.1
CWE-119 Jul 21, 2026
Incorrect boundary conditions in the Audio/Video: Playback component
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16361
Critical · 9.8
CWE-119 Jul 21, 2026
Memory safety bugs fixed in Thunderbird ESR 140.13
Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.