# Vulnerabilities published in 2026


- [CVE-2026-43747](https://insights.sbomify.com/CVE-2026-43747/): Memory corruption in macOS (high 7.1)
- [CVE-2026-43746](https://insights.sbomify.com/CVE-2026-43746/): Use after free in Safari (medium 6.5)
- [CVE-2026-43745](https://insights.sbomify.com/CVE-2026-43745/): Memory corruption in Safari (medium 6.5)
- [CVE-2026-43744](https://insights.sbomify.com/CVE-2026-43744/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-43743](https://insights.sbomify.com/CVE-2026-43743/): Race condition in iOS and iPadOS (medium 4.7)
- [CVE-2026-43742](https://insights.sbomify.com/CVE-2026-43742/): Use after free in Safari (medium 6.5)
- [CVE-2026-43741](https://insights.sbomify.com/CVE-2026-43741/): Business logic in macOS (medium 5.5)
- [CVE-2026-43740](https://insights.sbomify.com/CVE-2026-43740/): Use after free in Safari (medium 6.5)
- [CVE-2026-4374](https://insights.sbomify.com/CVE-2026-4374/): XML external entity in Connext Professional (high 8.8)
- [CVE-2026-43739](https://insights.sbomify.com/CVE-2026-43739/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-43738](https://insights.sbomify.com/CVE-2026-43738/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-43737](https://insights.sbomify.com/CVE-2026-43737/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-43736](https://insights.sbomify.com/CVE-2026-43736/): Missing authorization in macOS (medium 5.5)
- [CVE-2026-43735](https://insights.sbomify.com/CVE-2026-43735/): Cross-site request forgery in Safari (high 8.1)
- [CVE-2026-43734](https://insights.sbomify.com/CVE-2026-43734/): Use after free in Safari (medium 6.5)
- [CVE-2026-43733](https://insights.sbomify.com/CVE-2026-43733/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-43732](https://insights.sbomify.com/CVE-2026-43732/): Path traversal in Safari (medium 6.5)
- [CVE-2026-43731](https://insights.sbomify.com/CVE-2026-43731/): Use after free in Safari (high 8.8)
- [CVE-2026-43730](https://insights.sbomify.com/CVE-2026-43730/): Information disclosure in iOS and iPadOS (critical 9.8)
- [CVE-2026-4373](https://insights.sbomify.com/CVE-2026-4373/): JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media Field (high 7.5)
- [CVE-2026-43729](https://insights.sbomify.com/CVE-2026-43729/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-43728](https://insights.sbomify.com/CVE-2026-43728/): Race condition in macOS (high 7.5)
- [CVE-2026-43727](https://insights.sbomify.com/CVE-2026-43727/): Use after free in Safari (medium 6.5)
- [CVE-2026-43726](https://insights.sbomify.com/CVE-2026-43726/): Use after free in Safari (medium 6.5)
- [CVE-2026-43725](https://insights.sbomify.com/CVE-2026-43725/): Security feature bypass in Safari (high 7.1)
- [CVE-2026-43724](https://insights.sbomify.com/CVE-2026-43724/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-43723](https://insights.sbomify.com/CVE-2026-43723/): Path traversal in iOS and iPadOS (high 7.8)
- [CVE-2026-43722](https://insights.sbomify.com/CVE-2026-43722/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-43721](https://insights.sbomify.com/CVE-2026-43721/): Information disclosure in Safari (medium 6.5)
- [CVE-2026-43720](https://insights.sbomify.com/CVE-2026-43720/): Use after free in Safari (medium 6.5)
- [CVE-2026-4372](https://insights.sbomify.com/CVE-2026-4372/): Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers (high 7.8)
- [CVE-2026-43719](https://insights.sbomify.com/CVE-2026-43719/): Use after free in macOS (medium 6.5)
- [CVE-2026-43718](https://insights.sbomify.com/CVE-2026-43718/): Memory corruption in Safari (medium 6.5)
- [CVE-2026-43717](https://insights.sbomify.com/CVE-2026-43717/): Use after free in Safari (medium 6.5)
- [CVE-2026-43716](https://insights.sbomify.com/CVE-2026-43716/): Use after free in Safari (medium 6.5)
- [CVE-2026-43715](https://insights.sbomify.com/CVE-2026-43715/): Use after free in Safari (high 8.8)
- [CVE-2026-43714](https://insights.sbomify.com/CVE-2026-43714/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2026-43713](https://insights.sbomify.com/CVE-2026-43713/): Information disclosure in Safari (medium 6.5)
- [CVE-2026-43712](https://insights.sbomify.com/CVE-2026-43712/): Memory corruption in Safari (medium 6.5)
- [CVE-2026-43711](https://insights.sbomify.com/CVE-2026-43711/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-43710](https://insights.sbomify.com/CVE-2026-43710/): Memory corruption in macOS (critical 9.8)
- [CVE-2026-4371](https://insights.sbomify.com/CVE-2026-4371/): Out of bounds read in IMAP parsing (high 7.4)
- [CVE-2026-43709](https://insights.sbomify.com/CVE-2026-43709/): Use after free in Safari (medium 6.5)
- [CVE-2026-43708](https://insights.sbomify.com/CVE-2026-43708/): Information disclosure in Safari (medium 4.3)
- [CVE-2026-43707](https://insights.sbomify.com/CVE-2026-43707/): Memory corruption in Safari (medium 6.5)
- [CVE-2026-43706](https://insights.sbomify.com/CVE-2026-43706/): Memory corruption in iOS and iPadOS (medium 6.5)
- [CVE-2026-43705](https://insights.sbomify.com/CVE-2026-43705/): Memory corruption in Safari (high 8.8)
- [CVE-2026-43704](https://insights.sbomify.com/CVE-2026-43704/): Use after free in Safari (medium 5.3)
- [CVE-2026-43703](https://insights.sbomify.com/CVE-2026-43703/): Memory corruption in iOS and iPadOS (medium 6.5)
- [CVE-2026-43702](https://insights.sbomify.com/CVE-2026-43702/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-43701](https://insights.sbomify.com/CVE-2026-43701/): Security feature bypass in Safari (high 7.1)
- [CVE-2026-43700](https://insights.sbomify.com/CVE-2026-43700/): Security feature bypass in Safari (medium 6.5)
- [CVE-2026-4370](https://insights.sbomify.com/CVE-2026-4370/): Improper TLS Client/Server authentication and certificate verification on Database Cluster (critical 10.0)
- [CVE-2026-43699](https://insights.sbomify.com/CVE-2026-43699/): Use after free in Safari (medium 6.5)
- [CVE-2026-43698](https://insights.sbomify.com/CVE-2026-43698/): Command injection in macOS (high 7.8)
- [CVE-2026-43697](https://insights.sbomify.com/CVE-2026-43697/): Memory corruption in macOS (medium 4.3)
- [CVE-2026-43696](https://insights.sbomify.com/CVE-2026-43696/): Missing authorization in macOS (medium 5.3)
- [CVE-2026-43695](https://insights.sbomify.com/CVE-2026-43695/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-43694](https://insights.sbomify.com/CVE-2026-43694/): Memory corruption in macOS (critical 9.8)
- [CVE-2026-43693](https://insights.sbomify.com/CVE-2026-43693/): Race condition in macOS (high 7.0)
- [CVE-2026-43692](https://insights.sbomify.com/CVE-2026-43692/): Other in macOS (high 8.8)
- [CVE-2026-43691](https://insights.sbomify.com/CVE-2026-43691/): Path traversal in macOS (high 7.8)
- [CVE-2026-43690](https://insights.sbomify.com/CVE-2026-43690/): Race condition in macOS (medium 4.7)
- [CVE-2026-4369](https://insights.sbomify.com/CVE-2026-4369/): Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Variant Name (high 7.1)
- [CVE-2026-43689](https://insights.sbomify.com/CVE-2026-43689/): Privilege escalation in iOS and iPadOS (high 7.8)
- [CVE-2026-43688](https://insights.sbomify.com/CVE-2026-43688/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-43687](https://insights.sbomify.com/CVE-2026-43687/): Information disclosure in iOS and iPadOS (medium 6.5)
- [CVE-2026-43686](https://insights.sbomify.com/CVE-2026-43686/): Use after free in iOS and iPadOS (high 8.8)
- [CVE-2026-43685](https://insights.sbomify.com/CVE-2026-43685/): Command injection in FileMaker Cloud (high 7.2)
- [CVE-2026-43684](https://insights.sbomify.com/CVE-2026-43684/): Use after free in iOS and iPadOS (high 7.8)
- [CVE-2026-43683](https://insights.sbomify.com/CVE-2026-43683/): Memory corruption in macOS (high 7.1)
- [CVE-2026-43682](https://insights.sbomify.com/CVE-2026-43682/): Memory corruption in macOS (critical 9.8)
- [CVE-2026-43681](https://insights.sbomify.com/CVE-2026-43681/): Memory corruption in macOS (high 7.1)
- [CVE-2026-43680](https://insights.sbomify.com/CVE-2026-43680/): Code injection in FileMaker Cloud (high 7.2)
- [CVE-2026-4368](https://insights.sbomify.com/CVE-2026-4368/): Race Condition leading to User Session Mixup (high 7.7)
- [CVE-2026-43679](https://insights.sbomify.com/CVE-2026-43679/): Missing authorization in watchOS (low 2.4)
- [CVE-2026-43678](https://insights.sbomify.com/CVE-2026-43678/): Denial of service in swift-nio (medium 5.3)
- [CVE-2026-43677](https://insights.sbomify.com/CVE-2026-43677/): Memory corruption in macOS (medium 6.5)
- [CVE-2026-43676](https://insights.sbomify.com/CVE-2026-43676/): Memory corruption in Safari (medium 6.5)
- [CVE-2026-43674](https://insights.sbomify.com/CVE-2026-43674/): Auth bypass in iOS and iPadOS (medium 4.6)
- [CVE-2026-43673](https://insights.sbomify.com/CVE-2026-43673/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-43672](https://insights.sbomify.com/CVE-2026-43672/): Security feature bypass in macOS (high 7.1)
- [CVE-2026-43670](https://insights.sbomify.com/CVE-2026-43670/): Security feature bypass in Safari (high 8.8)
- [CVE-2026-4367](https://insights.sbomify.com/CVE-2026-4367/): Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing (medium 5.5)
- [CVE-2026-43668](https://insights.sbomify.com/CVE-2026-43668/): Use after free in iOS and iPadOS (high 7.5)
- [CVE-2026-43667](https://insights.sbomify.com/CVE-2026-43667/): Denial of service in iOS and iPadOS (medium 6.5)
- [CVE-2026-43666](https://insights.sbomify.com/CVE-2026-43666/): Memory corruption in iOS and iPadOS (medium 6.2)
- [CVE-2026-43665](https://insights.sbomify.com/CVE-2026-43665/): Missing authorization in macOS (medium 5.5)
- [CVE-2026-43664](https://insights.sbomify.com/CVE-2026-43664/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-43663](https://insights.sbomify.com/CVE-2026-43663/): Use after free in Safari (medium 6.5)
- [CVE-2026-43661](https://insights.sbomify.com/CVE-2026-43661/): Memory corruption in iOS and iPadOS (high 7.5)
- [CVE-2026-43660](https://insights.sbomify.com/CVE-2026-43660/): Security feature bypass in Safari (high 7.5)
- [CVE-2026-4366](https://insights.sbomify.com/CVE-2026-4366/): Keycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloak (medium 5.8)
- [CVE-2026-43659](https://insights.sbomify.com/CVE-2026-43659/): Race condition in iOS and iPadOS (medium 4.7)
- [CVE-2026-43658](https://insights.sbomify.com/CVE-2026-43658/): Memory corruption in Safari (high 7.5)
- [CVE-2026-43657](https://insights.sbomify.com/CVE-2026-43657/): Information disclosure in iOS and iPadOS (low 3.3)
- [CVE-2026-43656](https://insights.sbomify.com/CVE-2026-43656/): Memory corruption in iOS and iPadOS (high 7.3)
- [CVE-2026-43655](https://insights.sbomify.com/CVE-2026-43655/): Memory corruption in iOS and iPadOS (high 7.3)
- [CVE-2026-43654](https://insights.sbomify.com/CVE-2026-43654/): Information disclosure in iOS and iPadOS (high 7.5)
- [CVE-2026-43653](https://insights.sbomify.com/CVE-2026-43653/): Denial of service in iOS and iPadOS (medium 6.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/638/