CVEs published in March 2026
6,551 vulnerabilities, 676 critical, 10 exploited.
- apple ipados, visionos, watchos +2 more +4 moreThe issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS...4.6 Medium
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An...4.6 Medium
- apple ipados, macos, tvos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...6.2 Medium
- apple macosA downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing...6.2 Medium
- apple ipados, macos, visionos +2 more +4 moreA parsing issue in the handling of directory paths was addressed with improved path validation....7.5 High
- apple macosA validation issue existed in the entitlement verification. This issue was addressed with...8.4 High
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. An app...7.5 High
- apple macosAn information disclosure issue was addressed with improved memory management. This issue is...6.2 Medium
- apple ipados, macos, safari +7 more +9 moreA logic issue was addressed with improved state management. This issue is fixed in Safari 26.4,...4.3 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThis issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.3 and...5.5 Medium
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. An app...5.3 Medium
- apple ipados, macos, visionos +3 more +5 moreAn authorization issue was addressed with improved state management. This issue is fixed in iOS...5.5 Medium
- apple ipados, macos, visionos +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS...7.8 High
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4,...4.0 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA denial-of-service issue was addressed with improved input validation. This issue is fixed in...7.5 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26...6.5 Medium
- apple macosA buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe...6.2 Medium
- apple macosA path handling issue was addressed with improved validation. This issue is fixed in macOS...4.0 Medium
- apple ipados, macos, tvos +4 more +6 moreAn information leakage was addressed with additional validation. This issue is fixed in iOS 26.4...5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...4.0 Medium
- apple macosA parsing issue in the handling of directory paths was addressed with improved path validation....9.3 Critical
- apple macosAn authorization issue was addressed with improved state management. This issue is fixed in macOS...5.5 Medium
- apple macosThis issue was addressed through improved state management. This issue is fixed in macOS Sequoia...4.9 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThis issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.7...6.2 Medium
- apple xcodeA permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4...6.2 Medium
- apple macosA privacy issue was addressed with improved handling of temporary files. This issue is fixed in...3.3 Low
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. A user...8.8 High
- apple macosAn authorization issue was addressed with improved state management. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, visionos +2 more +4 moreA path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and...9.3 Critical
- apple macosA permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and...6.2 Medium
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia...5.1 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA privacy issue was addressed with improved handling of user preferences. This issue is fixed in...5.3 Medium
- apple macosA logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26.4....4.0 Medium
- apple ipados, macos, safari +2 more +4 moreA logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7...4.3 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...3.3 Low
- apple macosA privacy issue was addressed with improved handling of temporary files. This issue is fixed in...6.2 Medium
vlcOSS-FuzzUNKNOWN READ in mkv::matroska_segment_c::TrackInitNo score- isc kea, red hat enterprise linux 10, enterprise linux 10.0 extended update support +2 moreStack overflow in Kea daemons7.5 High
- isc bind, bind 9 +1 moreA stack use-after-return flaw in SIG(0) handling code may enable ACL bypass5.4 Medium
- isc bind, bind 9 +1 moreAuthenticated query containing a TKEY record may cause named to terminate unexpectedly6.5 Medium
- isc bind, bind 9, red hat enterprise linux 10 +6 more +8 moreMemory leak in code preparing DNSSEC proofs of non-existence7.5 High
- seafile serverSeafile Server has multiple stored XSS vulnerabilities8.7 High
- mmahrous thumblerthumbler allows OS Command Injection9.8 Critical
- zapolnoch tesseract ocrnode-tesseract-ocr is vulnerable to OS Command Injection through unsanitized recognize() function parameter9.8 Critical
- dbashford textracttextract is vulnerable to OS Command Injection9.8 Critical
- pdf-image project pdf-imagepdf-image has an OS Command Injection Vulnerability through its pdfFilePath parameter9.8 Critical
- isc bind, bind 9, red hat enterprise linux 10 +25 more +27 moreExcessive NSEC3 iterations cause high CPU load during insecure delegation validation7.5 High
- pf4j project pf4jpf4j is vulnerable to Path Traversal or Zip Slip attack through improper handling of zip entry names7.5 High
- Show moreLoading…