CVE Vulnerability Database
Search and browse 420,483 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-112421 | MEDIUM | 4.7 | 0.2% | Oct 26, 2026 | A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, ... |
| CVE-2026-112417 | HIGH | 7.8 | 0.2% | Oct 26, 2026 | An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a mal... |
| CVE-2026-112416 | MEDIUM | 5.5 | 0.2% | Oct 26, 2026 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2... |
| CVE-2026-112415 | MEDIUM | 6.5 | 0.5% | Oct 26, 2026 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2... |
| CVE-2026-112414 | MEDIUM | 6.5 | 0.6% | Oct 26, 2026 | A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS ... |
| CVE-2026-112413 | MEDIUM | 6.5 | 0.2% | Oct 26, 2026 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, ... |
| CVE-2026-112410 | HIGH | 7.5 | 0.3% | Oct 26, 2026 | A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS ... |
| CVE-2025-13833 | HIGH | 7.7 | 0.1% | Oct 26, 2026 | A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and... |
| CVE-2026-70382 | MEDIUM | 4.1 | 0.3% | Oct 26, 2026 | Some externally supplied values stored by the device may be rendered in the web interface without sufficient output enco... |
| CVE-2026-70381 | MEDIUM | 5.3 | 0.3% | Oct 26, 2026 | An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-devi... |
| CVE-2026-70380 | MEDIUM | 5.3 | 0.3% | Oct 26, 2026 | A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE... |
| CVE-2026-65632 | MEDIUM | 5.1 | 0.1% | Oct 26, 2026 | The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical length. When verifyin... |
| CVE-2026-65631 | MEDIUM | 6.9 | 0.2% | Oct 26, 2026 | Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion de... |
| CVE-2026-65630 | MEDIUM | 5.9 | 0.1% | Oct 26, 2026 | Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key throug... |
| CVE-2026-65629 | HIGH | 7.4 | 0.1% | Oct 26, 2026 | Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a passwor... |
| CVE-2026-65628 | MEDIUM | 5.9 | 0.1% | Oct 26, 2026 | jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKs. It... |
| CVE-2026-65627 | MEDIUM | 6.9 | 0.2% | Oct 26, 2026 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows ... |
| CVE-2026-65626 | MEDIUM | 5.9 | 0.1% | Oct 26, 2026 | The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbacher padding oracle. eme_pkcs1_d... |
| CVE-2026-65625 | MEDIUM | 5.9 | 0.1% | Oct 26, 2026 | The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from the attacke... |
| CVE-2026-57196 | LOW | 2.3 | 0.8% | Oct 26, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57193 | MEDIUM | 6.9 | 2.0% | Oct 26, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57187 | HIGH | 7.1 | 0.5% | Oct 26, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57184 | MEDIUM | 6.3 | 0.6% | Oct 26, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-116482 | LOW | 3.5 | 0.3% | Oct 26, 2026 | A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a2... |
| CVE-2026-116479 | MEDIUM | 4.3 | 0.3% | Oct 26, 2026 | A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JS... |