CVE-2026-59111 - Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi

CVE-2026-71054 - Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Ja

CVE-2026-56547 - The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchroniz

CVE-2026-46371 - Fleet is an open-source device management platform built on osquery. In versions up to and including

CVE-2026-78236 - An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to a

CVE-2026-65053 - Horde IMP's AppleDouble MIME viewer writes an attacker-controlled attachment name into an HTML statu

CVE-2026-43679 - This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An

CVE-2026-70907 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-70906 - Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Ja

CVE-2026-61308 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-60589 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-44845 - JumpServer is an open source bastion host and an operation and maintenance security audit system. Pr

CVE-2026-72131 - In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Prevent shared tags

CVE-2026-8457 - The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all ve

CVE-2026-64483 - In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: bound t

CVE-2026-64363 - In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pendin

CVE-2026-60526 - Vulnerability in Oracle Java SE (component: Installation). Supported versions that are affected are

CVE-2026-60166 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-60164 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-60147 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-47063 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-47059 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-47058 - Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Or

CVE-2026-47057 - Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Or

CVE-2026-47035 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-47034 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-47030 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-47027 - Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Or

CVE-2026-47021 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-47013 - Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Ora

CVE-2026-47010 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2026-46968 - Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle

CVE-2026-46917 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ

CVE-2025-68640 - The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET