# Vulnerabilities published in 2026


- [CVE-2026-64782](https://insights.sbomify.com/CVE-2026-64782/): Race condition in Safari (low 3.1)
- [CVE-2026-64781](https://insights.sbomify.com/CVE-2026-64781/): Denial of service in Safari (medium 4.3)
- [CVE-2026-64780](https://insights.sbomify.com/CVE-2026-64780/): Memory corruption in Safari (medium 4.3)
- [CVE-2026-6478](https://insights.sbomify.com/CVE-2026-6478/): PostgreSQL discloses MD5-hashed passwords via covert timing channel (medium 6.5)
- [CVE-2026-64779](https://insights.sbomify.com/CVE-2026-64779/): Race condition in Safari (low 3.1)
- [CVE-2026-64778](https://insights.sbomify.com/CVE-2026-64778/): Information disclosure in Safari (medium 6.5)
- [CVE-2026-64777](https://insights.sbomify.com/CVE-2026-64777/): Path traversal in container (medium 4.3)
- [CVE-2026-64776](https://insights.sbomify.com/CVE-2026-64776/): Memory corruption in macOS (medium 5.5)
- [CVE-2026-64775](https://insights.sbomify.com/CVE-2026-64775/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2026-64774](https://insights.sbomify.com/CVE-2026-64774/): Integer overflow in iOS and iPadOS (critical 9.8)
- [CVE-2026-64773](https://insights.sbomify.com/CVE-2026-64773/): Denial of service in container (high 7.5)
- [CVE-2026-64772](https://insights.sbomify.com/CVE-2026-64772/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2026-64771](https://insights.sbomify.com/CVE-2026-64771/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2026-64770](https://insights.sbomify.com/CVE-2026-64770/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2026-6477](https://insights.sbomify.com/CVE-2026-6477/): PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory (high 8.8)
- [CVE-2026-64769](https://insights.sbomify.com/CVE-2026-64769/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2026-64768](https://insights.sbomify.com/CVE-2026-64768/): Memory corruption in iOS and iPadOS (high 8.1)
- [CVE-2026-64767](https://insights.sbomify.com/CVE-2026-64767/): Memory corruption in macOS (critical 9.8)
- [CVE-2026-64766](https://insights.sbomify.com/CVE-2026-64766/): Integer overflow in iOS and iPadOS (high 7.8)
- [CVE-2026-64765](https://insights.sbomify.com/CVE-2026-64765/): Integer overflow in iOS and iPadOS (high 7.8)
- [CVE-2026-64764](https://insights.sbomify.com/CVE-2026-64764/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-64763](https://insights.sbomify.com/CVE-2026-64763/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-64762](https://insights.sbomify.com/CVE-2026-64762/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2026-64761](https://insights.sbomify.com/CVE-2026-64761/): Information disclosure in iOS and iPadOS (high 7.5)
- [CVE-2026-64760](https://insights.sbomify.com/CVE-2026-64760/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-6476](https://insights.sbomify.com/CVE-2026-6476/): PostgreSQL pg_createsubscriber allows SQL injection via subscription name (high 7.2)
- [CVE-2026-64759](https://insights.sbomify.com/CVE-2026-64759/): Integer overflow in iOS and iPadOS (high 8.8)
- [CVE-2026-64758](https://insights.sbomify.com/CVE-2026-64758/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-64757](https://insights.sbomify.com/CVE-2026-64757/): Memory corruption in Safari (high 8.8)
- [CVE-2026-64756](https://insights.sbomify.com/CVE-2026-64756/): Path traversal in iOS and iPadOS (medium 5.5)
- [CVE-2026-64755](https://insights.sbomify.com/CVE-2026-64755/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-64754](https://insights.sbomify.com/CVE-2026-64754/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-64753](https://insights.sbomify.com/CVE-2026-64753/): Information disclosure in Safari (medium 6.5)
- [CVE-2026-64752](https://insights.sbomify.com/CVE-2026-64752/): Memory corruption in iOS and iPadOS (high 7.3)
- [CVE-2026-64751](https://insights.sbomify.com/CVE-2026-64751/): Use after free in iOS and iPadOS (critical 9.8)
- [CVE-2026-64750](https://insights.sbomify.com/CVE-2026-64750/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-6475](https://insights.sbomify.com/CVE-2026-6475/): PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice (high 8.8)
- [CVE-2026-64749](https://insights.sbomify.com/CVE-2026-64749/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-64747](https://insights.sbomify.com/CVE-2026-64747/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-64746](https://insights.sbomify.com/CVE-2026-64746/): Missing authorization in iOS and iPadOS (critical 9.8)
- [CVE-2026-64745](https://insights.sbomify.com/CVE-2026-64745/): Auth bypass in macOS (low 2.4)
- [CVE-2026-64744](https://insights.sbomify.com/CVE-2026-64744/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-64743](https://insights.sbomify.com/CVE-2026-64743/): Missing authorization in iOS and iPadOS (medium 6.5)
- [CVE-2026-64742](https://insights.sbomify.com/CVE-2026-64742/): Information disclosure in iOS and iPadOS (medium 6.5)
- [CVE-2026-64741](https://insights.sbomify.com/CVE-2026-64741/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-64740](https://insights.sbomify.com/CVE-2026-64740/): Path traversal in iOS and iPadOS (critical 9.3)
- [CVE-2026-6474](https://insights.sbomify.com/CVE-2026-6474/): PostgreSQL timeofday() can disclose portions of server memory (medium 4.3)
- [CVE-2026-64739](https://insights.sbomify.com/CVE-2026-64739/): Memory corruption in iOS and iPadOS (high 8.8)
- [CVE-2026-64738](https://insights.sbomify.com/CVE-2026-64738/): Security feature bypass in iOS and iPadOS (critical 9.8)
- [CVE-2026-64737](https://insights.sbomify.com/CVE-2026-64737/): Security feature bypass in macOS (high 8.2)
- [CVE-2026-64736](https://insights.sbomify.com/CVE-2026-64736/): Memory corruption in iOS and iPadOS (high 7.1)
- [CVE-2026-64735](https://insights.sbomify.com/CVE-2026-64735/): Security feature bypass in iOS and iPadOS (medium 6.5)
- [CVE-2026-64734](https://insights.sbomify.com/CVE-2026-64734/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-64733](https://insights.sbomify.com/CVE-2026-64733/): Information disclosure in iOS and iPadOS (critical 9.8)
- [CVE-2026-64732](https://insights.sbomify.com/CVE-2026-64732/): Information disclosure in iOS and iPadOS (medium 4.6)
- [CVE-2026-64731](https://insights.sbomify.com/CVE-2026-64731/): Path traversal in macOS (critical 9.8)
- [CVE-2026-64730](https://insights.sbomify.com/CVE-2026-64730/): Other in Safari (medium 6.5)
- [CVE-2026-6473](https://insights.sbomify.com/CVE-2026-6473/): PostgreSQL server undersizes allocations, via integer wraparound (high 8.8)
- [CVE-2026-64729](https://insights.sbomify.com/CVE-2026-64729/): Use after free in iOS and iPadOS (critical 9.8)
- [CVE-2026-64728](https://insights.sbomify.com/CVE-2026-64728/): Security feature bypass in Safari (medium 6.5)
- [CVE-2026-64727](https://insights.sbomify.com/CVE-2026-64727/): Memory corruption in macOS (critical 9.8)
- [CVE-2026-64726](https://insights.sbomify.com/CVE-2026-64726/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2026-64725](https://insights.sbomify.com/CVE-2026-64725/): Memory corruption in iOS and iPadOS (high 7.1)
- [CVE-2026-64724](https://insights.sbomify.com/CVE-2026-64724/): Denial of service in iOS and iPadOS (medium 5.5)
- [CVE-2026-64723](https://insights.sbomify.com/CVE-2026-64723/): Business logic in iOS and iPadOS (medium 5.5)
- [CVE-2026-64722](https://insights.sbomify.com/CVE-2026-64722/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-64721](https://insights.sbomify.com/CVE-2026-64721/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-64720](https://insights.sbomify.com/CVE-2026-64720/): Race condition in iOS and iPadOS (critical 9.8)
- [CVE-2026-6472](https://insights.sbomify.com/CVE-2026-6472/): PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege (medium 5.4)
- [CVE-2026-64719](https://insights.sbomify.com/CVE-2026-64719/): Memory corruption in Safari (high 8.1)
- [CVE-2026-64718](https://insights.sbomify.com/CVE-2026-64718/): Use after free in Safari (medium 5.5)
- [CVE-2026-64717](https://insights.sbomify.com/CVE-2026-64717/): Race condition in iOS and iPadOS (medium 6.3)
- [CVE-2026-64716](https://insights.sbomify.com/CVE-2026-64716/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-64715](https://insights.sbomify.com/CVE-2026-64715/): Use after free in Safari (medium 6.5)
- [CVE-2026-64714](https://insights.sbomify.com/CVE-2026-64714/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-64713](https://insights.sbomify.com/CVE-2026-64713/): Information disclosure in Safari (high 8.1)
- [CVE-2026-64712](https://insights.sbomify.com/CVE-2026-64712/): Privilege escalation in macOS (high 7.8)
- [CVE-2026-64711](https://insights.sbomify.com/CVE-2026-64711/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-64710](https://insights.sbomify.com/CVE-2026-64710/): Information disclosure in macOS (medium 5.5)
- [CVE-2026-6471](https://insights.sbomify.com/CVE-2026-6471/): PostgreSQL logical decoding can dlopen arbitrary file (high 7.2)
- [CVE-2026-64709](https://insights.sbomify.com/CVE-2026-64709/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-64708](https://insights.sbomify.com/CVE-2026-64708/): Security feature bypass in macOS (medium 5.5)
- [CVE-2026-64707](https://insights.sbomify.com/CVE-2026-64707/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-64705](https://insights.sbomify.com/CVE-2026-64705/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-64704](https://insights.sbomify.com/CVE-2026-64704/): Memory corruption in macOS (critical 9.8)
- [CVE-2026-64703](https://insights.sbomify.com/CVE-2026-64703/): Use after free in macOS (critical 9.8)
- [CVE-2026-64702](https://insights.sbomify.com/CVE-2026-64702/): Security feature bypass in macOS (critical 9.8)
- [CVE-2026-64701](https://insights.sbomify.com/CVE-2026-64701/): Privilege escalation in macOS (high 7.8)
- [CVE-2026-64700](https://insights.sbomify.com/CVE-2026-64700/): Use after free in iOS and iPadOS (critical 9.8)
- [CVE-2026-6470](https://insights.sbomify.com/CVE-2026-6470/): PostgreSQL fails to check type USAGE privilege (medium 4.3)
- [CVE-2026-64699](https://insights.sbomify.com/CVE-2026-64699/): Information disclosure in macOS (medium 5.5)
- [CVE-2026-64698](https://insights.sbomify.com/CVE-2026-64698/): Memory corruption in macOS (critical 9.8)
- [CVE-2026-64697](https://insights.sbomify.com/CVE-2026-64697/): Memory corruption in macOS (critical 9.8)
- [CVE-2026-64696](https://insights.sbomify.com/CVE-2026-64696/): Memory corruption in macOS (critical 9.8)
- [CVE-2026-64695](https://insights.sbomify.com/CVE-2026-64695/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2026-64694](https://insights.sbomify.com/CVE-2026-64694/): Integer overflow in macOS (critical 9.8)
- [CVE-2026-64693](https://insights.sbomify.com/CVE-2026-64693/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-64692](https://insights.sbomify.com/CVE-2026-64692/): Memory corruption in iOS and iPadOS (high 7.1)
- [CVE-2026-64691](https://insights.sbomify.com/CVE-2026-64691/): Memory corruption in macOS (critical 9.8)
- [CVE-2026-6469](https://insights.sbomify.com/CVE-2026-6469/): PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership (low 3.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/467/