Filtered by vendor Apple
Subscribe
Total
14787 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-48347 | 3 Adobe, Apple, Microsoft | 3 Animate, Macos, Windows | 2026-07-16 | N/A | 7.7 HIGH |
| Animate is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed. | |||||
| CVE-2026-48346 | 3 Adobe, Apple, Microsoft | 3 Animate, Macos, Windows | 2026-07-16 | N/A | 7.9 HIGH |
| Animate is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed. | |||||
| CVE-2026-48345 | 3 Adobe, Apple, Microsoft | 3 Animate, Macos, Windows | 2026-07-16 | N/A | 8.2 HIGH |
| Animate is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed. | |||||
| CVE-2026-0277 | 2 Apple, Paloaltonetworks | 2 Iphone Os, Prisma Access Agent | 2026-07-16 | N/A | 5.9 MEDIUM |
| An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. The Prisma Access Agent on Windows, macOS, Linux, Android and ChromeOS are not affected. | |||||
| CVE-2026-47969 | 3 Adobe, Apple, Microsoft | 3 Audition, Macos, Windows | 2026-07-15 | N/A | 5.5 MEDIUM |
| Audition is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-48309 | 3 Adobe, Apple, Microsoft | 3 Audition, Macos, Windows | 2026-07-15 | N/A | 7.8 HIGH |
| Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-48365 | 3 Adobe, Apple, Microsoft | 3 Audition, Macos, Windows | 2026-07-15 | N/A | 7.8 HIGH |
| Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-48368 | 3 Adobe, Apple, Microsoft | 3 Audition, Macos, Windows | 2026-07-15 | N/A | 7.8 HIGH |
| Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-55054 | 2 Apple, Microsoft | 8 Macos, 365 Apps, Excel and 5 more | 2026-07-15 | N/A | 6.5 MEDIUM |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-47968 | 3 Adobe, Apple, Microsoft | 3 Audition, Macos, Windows | 2026-07-15 | N/A | 7.8 HIGH |
| Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-47967 | 3 Adobe, Apple, Microsoft | 3 Audition, Macos, Windows | 2026-07-15 | N/A | 7.8 HIGH |
| Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-43658 | 1 Apple | 6 Ipados, Iphone Os, Macos and 3 more | 2026-07-15 | N/A | 7.5 HIGH |
| The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash. | |||||
| CVE-2026-42899 | 3 Apple, Linux, Microsoft | 4 Macos, Linux Kernel, .net and 1 more | 2026-07-15 | N/A | 7.5 HIGH |
| Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-32203 | 3 Apple, Linux, Microsoft | 6 Macos, Linux Kernel, .net and 3 more | 2026-07-15 | N/A | 7.5 HIGH |
| Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-32178 | 3 Apple, Linux, Microsoft | 5 Macos, Linux Kernel, .net and 2 more | 2026-07-15 | N/A | 7.5 HIGH |
| Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-28955 | 1 Apple | 6 Ipados, Iphone Os, Macos and 3 more | 2026-07-15 | N/A | 8.8 HIGH |
| The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash. | |||||
| CVE-2026-28953 | 1 Apple | 6 Ipados, Iphone Os, Macos and 3 more | 2026-07-15 | N/A | 7.5 HIGH |
| The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash. | |||||
| CVE-2026-28947 | 1 Apple | 6 Ipados, Iphone Os, Macos and 3 more | 2026-07-15 | N/A | 8.8 HIGH |
| A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash. | |||||
| CVE-2026-28946 | 1 Apple | 1 Macos | 2026-07-15 | N/A | 6.5 MEDIUM |
| A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash. | |||||
| CVE-2026-28942 | 1 Apple | 6 Ipados, Iphone Os, Macos and 3 more | 2026-07-15 | N/A | 6.5 MEDIUM |
| A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash. | |||||