# Vulnerabilities published in 2026


- [CVE-2026-112512](https://insights.sbomify.com/CVE-2026-112512/): Security feature bypass in macOS (not scored)
- [CVE-2026-112511](https://insights.sbomify.com/CVE-2026-112511/): Path traversal in macOS (not scored)
- [CVE-2026-112510](https://insights.sbomify.com/CVE-2026-112510/): Memory corruption in macOS (not scored)
- [CVE-2026-11251](https://insights.sbomify.com/CVE-2026-11251/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-112508](https://insights.sbomify.com/CVE-2026-112508/): Memory corruption in macOS (not scored)
- [CVE-2026-112507](https://insights.sbomify.com/CVE-2026-112507/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112506](https://insights.sbomify.com/CVE-2026-112506/): Missing authorization in macOS (medium 5.5)
- [CVE-2026-112505](https://insights.sbomify.com/CVE-2026-112505/): Memory corruption in macOS (not scored)
- [CVE-2026-112504](https://insights.sbomify.com/CVE-2026-112504/): Path traversal in macOS (not scored)
- [CVE-2026-112502](https://insights.sbomify.com/CVE-2026-112502/): Memory corruption in macOS (not scored)
- [CVE-2026-112501](https://insights.sbomify.com/CVE-2026-112501/): Race condition in iOS and iPadOS (not scored)
- [CVE-2026-112500](https://insights.sbomify.com/CVE-2026-112500/): Information disclosure in iOS and iPadOS (not scored)
- [CVE-2026-11250](https://insights.sbomify.com/CVE-2026-11250/): Use after free in Chrome (critical 9.6)
- [CVE-2026-1125](https://insights.sbomify.com/CVE-2026-1125/): D-Link DIR-823X set_wifidog_settings sub_412E7C command injection (medium 6.9)
- [CVE-2026-112498](https://insights.sbomify.com/CVE-2026-112498/): Security feature bypass in macOS (not scored)
- [CVE-2026-112497](https://insights.sbomify.com/CVE-2026-112497/): Security feature bypass in macOS (not scored)
- [CVE-2026-112495](https://insights.sbomify.com/CVE-2026-112495/): Memory corruption in macOS (not scored)
- [CVE-2026-112494](https://insights.sbomify.com/CVE-2026-112494/): Security feature bypass in macOS (not scored)
- [CVE-2026-112493](https://insights.sbomify.com/CVE-2026-112493/): Privilege escalation in macOS (not scored)
- [CVE-2026-112492](https://insights.sbomify.com/CVE-2026-112492/): Race condition in macOS (not scored)
- [CVE-2026-112491](https://insights.sbomify.com/CVE-2026-112491/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-11249](https://insights.sbomify.com/CVE-2026-11249/): Use after free in Chrome (medium 4.7)
- [CVE-2026-112488](https://insights.sbomify.com/CVE-2026-112488/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112487](https://insights.sbomify.com/CVE-2026-112487/): Path traversal in macOS (not scored)
- [CVE-2026-112486](https://insights.sbomify.com/CVE-2026-112486/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112485](https://insights.sbomify.com/CVE-2026-112485/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112484](https://insights.sbomify.com/CVE-2026-112484/): Privilege escalation in macOS (high 7.8)
- [CVE-2026-112483](https://insights.sbomify.com/CVE-2026-112483/): Path traversal in macOS (not scored)
- [CVE-2026-112482](https://insights.sbomify.com/CVE-2026-112482/): Memory corruption in macOS (not scored)
- [CVE-2026-112481](https://insights.sbomify.com/CVE-2026-112481/): Memory corruption in macOS (not scored)
- [CVE-2026-112480](https://insights.sbomify.com/CVE-2026-112480/): Missing authorization in macOS (not scored)
- [CVE-2026-11248](https://insights.sbomify.com/CVE-2026-11248/): Security feature bypass in Chrome (high 8.8)
- [CVE-2026-112479](https://insights.sbomify.com/CVE-2026-112479/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112478](https://insights.sbomify.com/CVE-2026-112478/): Memory corruption in macOS (not scored)
- [CVE-2026-112477](https://insights.sbomify.com/CVE-2026-112477/): Race condition in iOS and iPadOS (not scored)
- [CVE-2026-112476](https://insights.sbomify.com/CVE-2026-112476/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112475](https://insights.sbomify.com/CVE-2026-112475/): Memory corruption in macOS (not scored)
- [CVE-2026-112474](https://insights.sbomify.com/CVE-2026-112474/): Use after free in iOS and iPadOS (not scored)
- [CVE-2026-112473](https://insights.sbomify.com/CVE-2026-112473/): Missing authorization in macOS (not scored)
- [CVE-2026-112471](https://insights.sbomify.com/CVE-2026-112471/): Memory corruption in macOS (medium 4.3)
- [CVE-2026-112470](https://insights.sbomify.com/CVE-2026-112470/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-11247](https://insights.sbomify.com/CVE-2026-11247/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-112469](https://insights.sbomify.com/CVE-2026-112469/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112468](https://insights.sbomify.com/CVE-2026-112468/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112467](https://insights.sbomify.com/CVE-2026-112467/): Security feature bypass in macOS (not scored)
- [CVE-2026-112466](https://insights.sbomify.com/CVE-2026-112466/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112464](https://insights.sbomify.com/CVE-2026-112464/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112462](https://insights.sbomify.com/CVE-2026-112462/): Security feature bypass in macOS (not scored)
- [CVE-2026-112461](https://insights.sbomify.com/CVE-2026-112461/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-11246](https://insights.sbomify.com/CVE-2026-11246/): Security feature bypass in Chrome (medium 5.3)
- [CVE-2026-112459](https://insights.sbomify.com/CVE-2026-112459/): Race condition in iOS and iPadOS (not scored)
- [CVE-2026-112457](https://insights.sbomify.com/CVE-2026-112457/): Memory corruption in macOS (high 7.1)
- [CVE-2026-112456](https://insights.sbomify.com/CVE-2026-112456/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112455](https://insights.sbomify.com/CVE-2026-112455/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-112454](https://insights.sbomify.com/CVE-2026-112454/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112453](https://insights.sbomify.com/CVE-2026-112453/): Path traversal in macOS (not scored)
- [CVE-2026-112451](https://insights.sbomify.com/CVE-2026-112451/): Memory corruption in macOS (not scored)
- [CVE-2026-11245](https://insights.sbomify.com/CVE-2026-11245/): Other in Chrome (medium 4.3)
- [CVE-2026-112449](https://insights.sbomify.com/CVE-2026-112449/): Integer overflow in iOS and iPadOS (not scored)
- [CVE-2026-112447](https://insights.sbomify.com/CVE-2026-112447/): Security feature bypass in macOS (not scored)
- [CVE-2026-112446](https://insights.sbomify.com/CVE-2026-112446/): Missing authorization in iOS and iPadOS (not scored)
- [CVE-2026-112444](https://insights.sbomify.com/CVE-2026-112444/): Security feature bypass in macOS (not scored)
- [CVE-2026-112443](https://insights.sbomify.com/CVE-2026-112443/): Memory corruption in macOS (not scored)
- [CVE-2026-112442](https://insights.sbomify.com/CVE-2026-112442/): Race condition in macOS (not scored)
- [CVE-2026-112441](https://insights.sbomify.com/CVE-2026-112441/): Information disclosure in macOS (not scored)
- [CVE-2026-11244](https://insights.sbomify.com/CVE-2026-11244/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-112438](https://insights.sbomify.com/CVE-2026-112438/): Business logic in macOS (high 8.8)
- [CVE-2026-112437](https://insights.sbomify.com/CVE-2026-112437/): Privilege escalation in macOS (not scored)
- [CVE-2026-112434](https://insights.sbomify.com/CVE-2026-112434/): Privilege escalation in macOS (not scored)
- [CVE-2026-112432](https://insights.sbomify.com/CVE-2026-112432/): Information disclosure in iOS and iPadOS (not scored)
- [CVE-2026-112430](https://insights.sbomify.com/CVE-2026-112430/): Auth bypass in macOS (not scored)
- [CVE-2026-11243](https://insights.sbomify.com/CVE-2026-11243/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-112429](https://insights.sbomify.com/CVE-2026-112429/): Memory corruption in macOS (not scored)
- [CVE-2026-112428](https://insights.sbomify.com/CVE-2026-112428/): Security feature bypass in macOS (not scored)
- [CVE-2026-112427](https://insights.sbomify.com/CVE-2026-112427/): Auth bypass in macOS (high 8.1)
- [CVE-2026-112425](https://insights.sbomify.com/CVE-2026-112425/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112424](https://insights.sbomify.com/CVE-2026-112424/): Memory corruption in macOS (not scored)
- [CVE-2026-112423](https://insights.sbomify.com/CVE-2026-112423/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112421](https://insights.sbomify.com/CVE-2026-112421/): Race condition in macOS (not scored)
- [CVE-2026-11242](https://insights.sbomify.com/CVE-2026-11242/): Information disclosure in Chrome (high 7.5)
- [CVE-2026-112417](https://insights.sbomify.com/CVE-2026-112417/): Integer overflow in visionOS (not scored)
- [CVE-2026-112416](https://insights.sbomify.com/CVE-2026-112416/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112415](https://insights.sbomify.com/CVE-2026-112415/): Memory corruption in iOS and iPadOS (medium 6.5)
- [CVE-2026-112414](https://insights.sbomify.com/CVE-2026-112414/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112413](https://insights.sbomify.com/CVE-2026-112413/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-112410](https://insights.sbomify.com/CVE-2026-112410/): Memory corruption in macOS (not scored)
- [CVE-2026-11241](https://insights.sbomify.com/CVE-2026-11241/): Privilege escalation in Chrome (high 8.0)
- [CVE-2026-112408](https://insights.sbomify.com/CVE-2026-112408/): Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket() (critical 9.4)
- [CVE-2026-112407](https://insights.sbomify.com/CVE-2026-112407/): Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications (high 8.7)
- [CVE-2026-112406](https://insights.sbomify.com/CVE-2026-112406/): Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle (high 8.7)
- [CVE-2026-112405](https://insights.sbomify.com/CVE-2026-112405/): Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0 (high 8.7)
- [CVE-2026-112404](https://insights.sbomify.com/CVE-2026-112404/): Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels (high 8.8)
- [CVE-2026-112403](https://insights.sbomify.com/CVE-2026-112403/): Pillow: Heap buffer overflow in ImagingJpegDecode (critical 9.2)
- [CVE-2026-112402](https://insights.sbomify.com/CVE-2026-112402/): Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform (high 8.7)
- [CVE-2026-112401](https://insights.sbomify.com/CVE-2026-112401/): Pillow: Quadratic GIF comment concatenation allows DoS in Image.open() (medium 6.9)
- [CVE-2026-112400](https://insights.sbomify.com/CVE-2026-112400/): Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS (high 8.7)
- [CVE-2026-11240](https://insights.sbomify.com/CVE-2026-11240/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-1124](https://insights.sbomify.com/CVE-2026-1124/): Yonyou KSOA HTTP GET Parameter work_report.jsp sql injection (medium 6.9)
- [CVE-2026-112399](https://insights.sbomify.com/CVE-2026-112399/): Pillow: APNG background disposal allocates full canvas before decompression bomb check (high 8.7)
- [CVE-2026-112398](https://insights.sbomify.com/CVE-2026-112398/): Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution (critical 9.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/922/