NIST · via Voidly Atlas
NVD — Known Software Vulnerabilities
The circumvention and secure-comms stack — VPNs, routers, browsers, messengers — is built on this software. A flaw here is a flaw in the tools activists and journalists rely on to evade censorship safely.
168,126 records · source: NIST National Vulnerability Database
This is the agency's own public-domain data, curated and made citable by Voidly. Voidly adds no independent claim — always verify against the linked canonical source.
CVE-2026-86981
2026-10-20 · An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi
CVE-2026-86979
2026-10-20 · A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Ga
CVE-2026-86977
2026-10-20 · An authorization issue was addressed with improved network restrictions. This issue is fix
CVE-2026-86976
2026-10-20 · An authorization issue was addressed with improved state management. This issue is fixed i
CVE-2026-86975
2026-10-20 · An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in
CVE-2026-86963
2026-10-20 · A denial-of-service issue was addressed with improved input validation. This issue is fixe
CVE-2026-86962
2026-10-20 · A double free issue was addressed with improved memory management. This issue is fixed in
CVE-2026-86961
2026-10-20 · A race condition was addressed with additional validation. This issue is fixed in iOS 27 a
CVE-2026-86959
2026-10-20 · An input validation issue was addressed with improved input validation. This issue is fixe
CVE-2026-86957
2026-10-20 · An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in
CVE-2026-86955
2026-10-20 · An authorization issue was addressed with improved state management. This issue is fixed i
CVE-2026-86953
2026-10-20 · An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi
CVE-2026-86949
2026-10-20 · This issue was addressed by enforcing library validation on the affected binaries. This is
CVE-2026-86948
2026-10-20 · This issue was addressed by enforcing library validation on the affected binaries. This is
CVE-2026-86944
2026-10-20 · An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi
CVE-2026-86940
2026-10-20 · This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Gol
CVE-2026-86935
2026-10-20 · This issue was addressed by removing additional entitlements. This issue is fixed in macOS
CVE-2026-86933
2026-10-20 · A permissions issue was addressed with additional sandbox restrictions. This issue is fixe
CVE-2026-86932
2026-10-20 · An authorization issue was addressed with improved state management. This issue is fixed i
CVE-2026-86928
2026-10-20 · A path handling issue was addressed with improved validation. This issue is fixed in macOS
CVE-2026-86922
2026-10-20 · A type confusion issue was addressed with improved state management. This issue is fixed i
CVE-2026-86921
2026-10-20 · A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.
CVE-2026-86919
2026-10-20 · A stack overflow was addressed with improved input validation. This issue is fixed in iOS
CVE-2026-86918
2026-10-20 · An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi
CVE-2026-86915
2026-10-20 · A race condition was addressed with improved locking. This issue is fixed in macOS Golden
CVE-2026-86914
2026-10-20 · An information disclosure issue was addressed with improved state management. This issue i
CVE-2026-86913
2026-10-20 · A use after free issue was addressed with improved memory management. This issue is fixed
CVE-2026-86907
2026-10-20 · An authorization issue was addressed with improved entitlement checks. This issue is fixed
CVE-2026-86875
2026-10-20 · An input validation issue was addressed with improved input validation. This issue is fixe
CVE-2026-86874
2026-10-20 · An out-of-bounds read was addressed with improved input validation. This issue is fixed in
CVE-2026-86872
2026-10-20 · A logic issue was addressed with improved state management. This issue is fixed in Safari
CVE-2026-86871
2026-10-20 · An integer underflow was addressed with improved input validation. This issue is fixed in
CVE-2026-86868
2026-10-20 · An authentication issue was addressed with improved state management. This issue is fixed
CVE-2026-84613
2026-10-20 · An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi
CVE-2026-84582
2026-10-20 · A privacy issue was addressed with improved access restrictions. This issue is fixed in iO
CVE-2026-84579
2026-10-20 · A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate
CVE-2026-84547
2026-10-20 · A memory corruption issue was addressed with improved input validation. This issue is fixe
CVE-2026-84508
2026-10-20 · This issue was addressed with improved validation of the caller's access. This issue is fi
CVE-2026-84490
2026-10-20 · This issue was addressed through improved state management. This issue is fixed in iOS 27
CVE-2026-77938
MEDIUM 6.5 · 2026-10-20
CVE-2026-77937
HIGH 8.1 · 2026-10-20
CVE-2026-77936
CRITICAL 9.8 · 2026-10-20
CVE-2026-77935
HIGH 8.3 · 2026-10-20
CVE-2026-77934
HIGH 8.8 · 2026-10-20
CVE-2026-77933
CRITICAL 9.8 · 2026-10-20
CVE-2026-77932
CRITICAL 9.8 · 2026-10-20
CVE-2026-77930
HIGH 8.8 · 2026-10-20
CVE-2026-77926
HIGH 8.8 · 2026-10-20
CVE-2026-75128
CRITICAL 9.8 · 2026-10-20
CVE-2026-65396
2026-10-20 · A buffer overflow was addressed with improved size validation. This issue is fixed in macO
CVE-2026-65379
2026-10-20 · The issue was addressed with improved handling of secure input state. This issue is fixed
CVE-2026-65372
2026-10-20 · A race condition was addressed with additional validation. This issue is fixed in macOS Go
CVE-2026-65356
2026-10-20 · An access issue was addressed with improved access controls. This issue is fixed in macOS
CVE-2026-28854
2026-10-20 · The issue was addressed with additional app bundle integrity checks. This issue is fixed i
CVE-2026-28853
2026-10-20 · The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, m
CVE-2026-28850
2026-10-20 · An authorization issue was addressed with improved state management. This issue is fixed i
CVE-2026-109444
HIGH 8.8 · 2026-10-20
CVE-2026-109443
HIGH 8.8 · 2026-10-20
CVE-2026-109442
CRITICAL 9.8 · 2026-10-20
CVE-2026-109441
MEDIUM 5.8 · 2026-10-20
CVE-2026-109440
HIGH 8.1 · 2026-10-20
CVE-2026-109395
CRITICAL 9.1 · 2026-10-20
CVE-2026-105298
2026-10-20 · Summary
Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differ
CVE-2026-105297
HIGH 7.5 · 2026-10-20
CVE-2026-8355
2026-10-20 · IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Fo
CVE-2026-112373
MEDIUM 6.5 · 2026-10-20
CVE-2026-109126
HIGH 8.8 · 2026-10-20
CVE-2026-107400
HIGH 8.8 · 2026-10-20
CVE-2026-107366
HIGH 8.3 · 2026-10-20
CVE-2026-105453
HIGH 8.4 · 2026-10-20
CVE-2026-77684
MEDIUM 5.7 · 2026-10-19
CVE-2026-19595
MEDIUM 6.1 · 2026-10-19
CVE-2026-19178
MEDIUM 6.8 · 2026-10-19
CVE-2026-112991
2026-10-19 · The html_to_markdown expansion module in MISP Modules contains a server-side request forge
CVE-2026-112372
MEDIUM 6.6 · 2026-10-19
CVE-2026-112371
CRITICAL 9.9 · 2026-10-19
CVE-2026-112370
CRITICAL 9.9 · 2026-10-19
CVE-2025-36252
MEDIUM 6.3 · 2026-10-19
CVE-2025-36069
MEDIUM 5.5 · 2026-10-19
CVE-2025-36061
MEDIUM 6.5 · 2026-10-19
CVE-2026-57529
2026-10-19 · Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority
CVE-2026-57528
2026-10-19 · Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority
CVE-2026-57526
2026-10-19 · Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority
CVE-2026-57519
2026-10-19 · Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority
CVE-2026-57515
2026-10-19 · Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority
CVE-2026-57514
2026-10-19 · Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority
CVE-2026-57513
2026-10-19 · Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority
CVE-2026-57512
2026-10-19 · Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority
CVE-2026-56714
2026-10-19 · Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority
CVE-2026-53995
HIGH 8.2 · 2026-10-19
CVE-2026-112901
2026-10-19 · Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnera
CVE-2026-112900
2026-10-19 · Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argum
CVE-2026-112898
2026-10-19 · Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitial
CVE-2026-112897
2026-10-19 · Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitializ
CVE-2026-112896
2026-10-19 · Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond
CVE-2026-112895
2026-10-19 · Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources
CVE-2026-112894
2026-10-19 · Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time t
CVE-2026-112893
2026-10-19 · Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid g
CVE-2026-112892
2026-10-19 · Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can
CVE-2026-112891
2026-10-19 · Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic cop
Machine-readable: api.voidly.ai/v1/atlas/federal/nvd-cves. Source data is U.S. federal public domain (17 U.S.C. §105). Re-surfaced by Voidly under CC BY 4.0.