THE LATEST / SECURITY & VULNERABILITIES
Threat News
Recent vulnerabilities and security advisories, straight from the source.
Every cached source, newest first. All entries link to the original publisher.
For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.
15,917 stories · Past 30 days · Newest first
Subscribe to this view · RSSSource updates · Some delayed
- NVDUpdates delayed · Checked
- CISA · Known ExploitedUp to date · Checked
- CISA · IndustrialUpdates delayed · Checked
- CERT-EUUp to date · Checked
Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.
- NVD
CVE-2026-86962 — A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 a…
Medium · CVSS 3.1 5.5 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-86962Read original ↗ (opens in a new tab) - NVD
CVE-2026-86961 — A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27…
High · CVSS 3.1 7.8 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.
CVE-2026-86961Read original ↗ (opens in a new tab) - NVD
CVE-2026-86959 — An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS…
CVSS unscored / not supplied
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to unexpected process termination.
CVE-2026-86959Read original ↗ (opens in a new tab) - NVD
CVE-2026-86957 — An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 a…
Medium · CVSS 3.1 6.5 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.
CVE-2026-86957Read original ↗ (opens in a new tab) - NVD
CVE-2026-86955 — An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may…
Medium · CVSS 3.1 5.5 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.
CVE-2026-86955Read original ↗ (opens in a new tab) - NVD
CVE-2026-86953 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS…
Medium · CVSS 3.1 4.6 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.
CVE-2026-86953Read original ↗ (opens in a new tab) - NVD
CVE-2026-86949 — This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malici…
High · CVSS 3.1 8.8 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox.
CVE-2026-86949Read original ↗ (opens in a new tab) - NVD
CVE-2026-86948 — This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app m…
CVSS unscored / not supplied
This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.
CVE-2026-86948Read original ↗ (opens in a new tab) - NVD
CVE-2026-86944 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, m…
CVSS unscored / not supplied
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
CVE-2026-86944Read original ↗ (opens in a new tab) - NVD
CVE-2026-86940 — This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to…
Medium · CVSS 3.1 5.5 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.
CVE-2026-86940Read original ↗ (opens in a new tab) - NVD
CVE-2026-86935 — This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be abl…
CVSS unscored / not supplied
This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data.
CVE-2026-86935Read original ↗ (opens in a new tab) - NVD
CVE-2026-86933 — A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app…
Low · CVSS 3.1 3.3 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.
CVE-2026-86933Read original ↗ (opens in a new tab) - NVD
CVE-2026-86932 — An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may…
Medium · CVSS 3.1 5.5 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.
CVE-2026-86932Read original ↗ (opens in a new tab) - NVD
CVE-2026-86928 — A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be abl…
Medium · CVSS 3.1 5.5 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.
CVE-2026-86928Read original ↗ (opens in a new tab) - NVD
CVE-2026-86922 — A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27,…
High · CVSS 3.1 8.8 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2026-86922Read original ↗ (opens in a new tab) - NVD
CVE-2026-86921 — A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPad…
Medium · CVSS 3.1 6.2 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.
CVE-2026-86921Read original ↗ (opens in a new tab) - NVD
CVE-2026-86919 — A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and i…
High · CVSS 3.1 8.8 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.
CVE-2026-86919Read original ↗ (opens in a new tab) - NVD
CVE-2026-86918 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS…
Medium · CVSS 3.1 4.3 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.
CVE-2026-86918Read original ↗ (opens in a new tab) - NVD
CVE-2026-86915 — A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cau…
Medium · CVSS 3.1 4.7 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.
CVE-2026-86915Read original ↗ (opens in a new tab) - NVD
CVE-2026-86914 — An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, m…
Medium · CVSS 3.1 5.5 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive network connection information.
CVE-2026-86914Read original ↗ (opens in a new tab) - NVD
CVE-2026-86913 — A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 2…
Medium · CVSS 3.1 5.4 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
CVE-2026-86913Read original ↗ (opens in a new tab) - NVD
CVE-2026-86907 — An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Taho…
Medium · CVSS 3.1 4.4 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.
CVE-2026-86907Read original ↗ (opens in a new tab) - NVD
CVE-2026-86875 — An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a malicious…
Medium · CVSS 3.1 4.3 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination.
CVE-2026-86875Read original ↗ (opens in a new tab) - NVD
CVE-2026-86874 — An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously c…
Low · CVSS 3.1 3.3 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination.
CVE-2026-86874Read original ↗ (opens in a new tab) - NVD
CVE-2026-86872 — A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Proce…
Medium · CVSS 3.1 5.4 · Assessor: 134c704f-9b21-4f2e-91b3-4a467353bcc0
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.
CVE-2026-86872Read original ↗ (opens in a new tab)
Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.