Export limit exceeded: 21505 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 416579 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 11), (line:1, col:12)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (416579 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-113914 1 Apple 1 Ios And Ipados 2026-10-29 5.5 Medium
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
CVE-2026-113908 1 Apple 1 Ios And Ipados 2026-10-29 5.5 Medium
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
CVE-2026-113896 1 Apple 3 Ios And Ipados, Macos, Visionos 2026-10-29 4.7 Medium
A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data.
CVE-2026-113697 2026-10-29 N/A
Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticated attackers to execute script in another user's browser after that user opens a crafted link.
CVE-2026-113696 2026-10-29 N/A
Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to make unauthorized changes to approval state and bypass intended approval restrictions.
CVE-2026-113695 2026-10-29 N/A
Reflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to inject script content into HTML responses viewed by another user.
CVE-2026-113694 2026-10-29 N/A
Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to access or modify attachment resources belonging to other users.
CVE-2026-112706 1 Apple 4 Ios And Ipados, Tvos, Visionos and 1 more 2026-10-29 5.5 Medium
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112701 1 Apple 1 Ios And Ipados 2026-10-29 5.5 Medium
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112685 1 Apple 5 Ios And Ipados, Macos, Tvos and 2 more 2026-10-29 5.5 Medium
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112678 1 Apple 4 Ios And Ipados, Macos, Visionos and 1 more 2026-10-29 5.5 Medium
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112675 1 Apple 1 Macos 2026-10-29 5.5 Medium
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.
CVE-2026-112658 1 Apple 2 Ios And Ipados, Macos 2026-10-29 5.5 Medium
This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access sensitive user data.
CVE-2026-112618 1 Apple 2 Ios And Ipados, Visionos 2026-10-29 5.5 Medium
An access issue was addressed with improved access restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, visionOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112617 1 Apple 1 Macos 2026-10-29 5.5 Medium
An information disclosure issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data.
CVE-2026-112609 1 Apple 1 Ios And Ipados 2026-10-29 5.5 Medium
This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112559 1 Apple 4 Ios And Ipados, Macos, Visionos and 1 more 2026-10-29 5.5 Medium
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112547 1 Apple 1 Ios And Ipados 2026-10-29 5.5 Medium
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
CVE-2026-112533 1 Apple 1 Macos 2026-10-29 5.5 Medium
An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.
CVE-2026-112506 1 Apple 1 Macos 2026-10-29 5.5 Medium
A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data.