CVE-2026-87690 - The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relativ

CVE-2026-108119 - A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardli

CVE-2026-106059 - GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to

CVE-2026-86950 - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS

CVE-2026-101047 - Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages

CVE-2026-93286 - In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointe

CVE-2026-81880 - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radar

CVE-2026-47252 - Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INS

CVE-2026-93152 - In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release

CVE-2026-91962 - FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing Frame

CVE-2026-84601 - A permissions issue was addressed with improved state management. This issue is fixed in macOS Golde

CVE-2026-28836 - A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8.

CVE-2026-20683 - An authentication issue was addressed with improved state management. This issue is fixed in iOS 27

CVE-2026-89596 - In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when

CVE-2026-89572 - In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP tab

CVE-2026-54135 - AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol. Versions pr

CVE-2026-88047 - Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in sr

CVE-2026-87931 - A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearabl

CVE-2026-18090 - A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-b

CVE-2026-57163 - PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a15

CVE-2026-59111 - Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi

CVE-2026-71054 - Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Ja

CVE-2026-56547 - The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchroniz

CVE-2026-46371 - Fleet is an open-source device management platform built on osquery. In versions up to and including

CVE-2026-78236 - An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to a

CVE-2026-65053 - Horde IMP's AppleDouble MIME viewer writes an attacker-controlled attachment name into an HTML statu

CVE-2026-43679 - This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An

CVE-2026-70907 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-70906 - Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Ja

CVE-2026-61308 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-60589 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-44845 - JumpServer is an open source bastion host and an operation and maintenance security audit system. Pr

CVE-2026-72131 - In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Prevent shared tags

CVE-2026-8457 - The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all ve

CVE-2026-64483 - In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: bound t

CVE-2026-64363 - In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pendin

CVE-2026-60526 - Vulnerability in Oracle Java SE (component: Installation). Supported versions that are affected are

CVE-2026-60166 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-60164 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-60147 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-47063 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-47059 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-47058 - Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Or

CVE-2026-47057 - Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Or

CVE-2026-47035 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-47034 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-47030 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-47027 - Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Or

CVE-2026-47021 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-47013 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-47010 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-46968 - Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle

CVE-2026-46917 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2025-68640 - The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET

CVE-2026-47081 - An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an XAPPLEPUSHSERVICE f