CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 18:23 UTC )
This week: 5,395 CVEs published, 348 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,395 Show in the list Critical, last 7 days 348 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product apple:ipados . Show all products
672 CVEs, showing 651 to 672 Previous Page 14 of 14 CVE Severity Title Published CVE-2021-30860 Known exploited
High 7.8 An integer overflow was addressed with improved input validation. Assigned by apple
Aug 24, 2021 CVE-2021-30858 Known exploited
High 8.8 A use after free issue was addressed with improved memory management. Assigned by apple
Aug 24, 2021 CVE-2021-1879 Known exploited
Medium 6.1 This issue was addressed by improved management of object lifetimes. Assigned by apple
Apr 2, 2021 CVE-2021-1871 Known exploited
Critical 9.8 A logic issue was addressed with improved restrictions. Assigned by apple
Apr 2, 2021 CVE-2021-1870 Known exploited
Critical 9.8 A logic issue was addressed with improved restrictions. Assigned by apple
Apr 2, 2021 CVE-2021-1789 Known exploited
High 8.8 A type confusion issue was addressed with improved state handling. Assigned by apple
Apr 2, 2021 CVE-2021-1782 Known exploited
High 7.0 A race condition was addressed with improved locking. Assigned by apple
Apr 2, 2021 CVE-2020-27930 Known exploited
High 7.8 A memory corruption issue was addressed with improved input validation. Assigned by apple
Dec 8, 2020 CVE-2020-27950 Known exploited
Medium 5.5 A memory initialization issue was addressed. Assigned by apple
Dec 8, 2020 CVE-2020-27932 Known exploited
High 7.8 A type confusion issue was addressed with improved state handling. Assigned by apple
Dec 8, 2020 CVE-2020-9934 Known exploited
Medium 5.5 An issue existed in the handling of environment variables. Assigned by apple
Oct 16, 2020 CVE-2020-9907 Known exploited
High 7.8 A memory corruption issue was addressed by removing the vulnerable code. Assigned by apple
Oct 16, 2020 CVE-2020-15358 Medium 5.5 In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation. Assigned by mitre
Jun 27, 2020 CVE-2020-9818 Known exploited
High 8.8 An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple
Jun 9, 2020 CVE-2020-9819 Known exploited
Medium 4.3 A memory consumption issue was addressed with improved memory handling. Assigned by apple
Jun 9, 2020 CVE-2020-9859 Known exploited
High 7.8 A memory consumption issue was addressed with improved memory handling. Assigned by apple
Jun 5, 2020 CVE-2020-13630 High 7.0 ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. Assigned by mitre
May 27, 2020 CVE-2020-13631 Medium 5.5 SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. Assigned by mitre
May 27, 2020 CVE-2020-13434 Medium 5.5 SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. Assigned by mitre
May 24, 2020 CVE-2020-3837 Known exploited
High 7.8 A memory corruption issue was addressed with improved memory handling. Assigned by apple
Feb 27, 2020 CVE-2019-19906 High 7.5 cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. Assigned by mitre
Dec 19, 2019 CVE-2013-0340 Medium 6.8 expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of s… Assigned by redhat
Jan 21, 2014
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
