2026 CVE Vulnerabilities

64,779 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-43661HIGH7.5A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7....
CVE-2026-43660HIGH7.5A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, ...
CVE-2026-43659MEDIUM4.7A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5...
CVE-2026-43658HIGH7.5The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.1...
CVE-2026-43656HIGH7.3An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS ...
CVE-2026-43655HIGH7.3An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macO...
CVE-2026-43654HIGH7.5The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and...
CVE-2026-43653MEDIUM6.2The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and...
CVE-2026-43652HIGH7.5A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.5. An app may be a...
CVE-2026-42888MEDIUM6.9Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the podcast creation endpoint at server/c...
CVE-2026-41489HIGH8.8Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From ...
CVE-2026-39871HIGH7.5A path handling issue was addressed with improved logic. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8....
CVE-2026-39870HIGH7.5The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7,...
CVE-2026-39869MEDIUM4.3The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and...
CVE-2026-37630HIGH7.3An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the js_mapped_arguments_mark function
CVE-2026-28996MEDIUM5.5A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26...
CVE-2026-28995HIGH8.8A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 an...
CVE-2026-28994MEDIUM5.3A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7....
CVE-2026-28993MEDIUM5.5This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 18.7.9 and iPadOS 1...
CVE-2026-28992MEDIUM4.7A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7...
CVE-2026-28991HIGH7.5An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macO...
CVE-2026-28990HIGH7.5The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 a...
CVE-2026-28988MEDIUM5.5A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS T...
CVE-2026-28987HIGH7.5A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26....
CVE-2026-28986HIGH7.5A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now