CVE Vulnerability Database

Search and browse 420,973 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-86871MEDIUM5.9An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Se...
CVE-2026-86868CRITICAL9.1An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS...
CVE-2026-84613MEDIUM6.5An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26....
CVE-2026-84582MEDIUM5.5A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Gold...
CVE-2026-84579HIGH8.8A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS...
CVE-2026-84547LOW3.5A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, mac...
CVE-2026-84508MEDIUM5.5This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, m...
CVE-2026-84490LOW2This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker wit...
CVE-2026-77938MEDIUM6.5Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server sec...
CVE-2026-77937HIGH8.1Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users ...
CVE-2026-77936CRITICAL9.8Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never ...
CVE-2026-77935HIGH8.3Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenti...
CVE-2026-77934HIGH8.8Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands ...
CVE-2026-77933CRITICAL9.8DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static...
CVE-2026-77932CRITICAL9.8DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agen...
CVE-2026-77930CRITICAL9.8EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell comman...
CVE-2026-77926HIGH8.8Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating s...
CVE-2026-75128CRITICAL9.8Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name with...
CVE-2026-65396MEDIUM5.5A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoi...
CVE-2026-65379MEDIUM5.5The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS...
CVE-2026-65372MEDIUM4.7A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15...
CVE-2026-65356MEDIUM5.5An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia ...
CVE-2026-28854HIGH7.5The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A mali...
CVE-2026-28853HIGH7.8The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be...
CVE-2026-28850MEDIUM5.5An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.8, visionOS...