CyberStack

NIST

CVE intelligence

Cached from NVD. 2026-11-03 15:40 Perth time (AWST). Recent.

1765KEV listed
205Published, last 14 days
663Critical
998High
CVETitleVendorPublishedCVSSKEV listed
CVE-2026-86875An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binarApple2026-10-20—
CVE-2026-86874An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary maApple2026-10-20—
CVE-2026-86872A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciousl—2026-10-20—
CVE-2026-86871An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta—2026-10-20—
CVE-2026-86868An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS—2026-10-20—
CVE-2026-86467Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authentication response to the browser that began i—2026-10-20—
CVE-2026-85267A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacke—2026-10-20—
CVE-2026-84613An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS—2026-10-20—
CVE-2026-84582A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27,—2026-10-20—
CVE-2026-84579A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening—2026-10-20—
CVE-2026-84547A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, mac—2026-10-20—
CVE-2026-84508This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27,—2026-10-20—
CVE-2026-84490This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to—2026-10-20—
CVE-2026-8355IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with —2026-10-20—
CVE-2026-77938Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSa—2026-10-20—
CVE-2026-77937Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-—2026-10-20—
CVE-2026-77936Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API ro—2026-10-20—
CVE-2026-77935Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to acces—2026-10-20—
CVE-2026-77934Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow —2026-10-20—
CVE-2026-77933DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD—2026-10-20—
CVE-2026-77932DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on—2026-10-20—
CVE-2026-77930EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating the—2026-10-20—
CVE-2026-77926Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands throu—2026-10-20—
CVE-2026-75753Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP—2026-10-20—
CVE-2026-75128Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, —2026-10-20—
CVE-2026-65396A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe —2026-10-20—
CVE-2026-65379The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS—2026-10-20—
CVE-2026-65372A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7—2026-10-20—
CVE-2026-65356An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26—2026-10-20—
CVE-2026-43858A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.—2026-10-20—
CVE-2026-43857A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.—2026-10-20—
CVE-2026-43856A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arb—2026-10-20—
CVE-2026-43855A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.—2026-10-20—
CVE-2026-43854A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled —2026-10-20—
CVE-2026-43853A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.—2026-10-20—
CVE-2026-43852A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.—2026-10-20—
CVE-2026-43851A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.—2026-10-20—
CVE-2026-43850A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.—2026-10-20—
CVE-2026-43849A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.—2026-10-20—
CVE-2026-43848A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.—2026-10-20—

Previous41–80 of 205Next