CVE-2026-43745: WebKit Out-of-Bounds Write Vulnerability
An out-of-bounds write issue in WebKit that could cause an unexpected Safari crash when processing maliciously crafted web content. Patched with improved…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-43715: WebKit Use-After-Free Vulnerability
A use-after-free issue in WebKit that could lead to memory corruption when processing maliciously crafted web content. Addressed with improved memory management.
CVE-2026-43720: WebKit Canvas Use-After-Free Vulnerability
A use-after-free vulnerability in WebKit Canvas that could be exploited by malicious web content.
CVE-2026-43725: WebKit Sandbox Escape Vulnerability
A vulnerability in WebKit that could allow a malicious website to process restricted web content outside the sandbox.
CVE-2026-43722: Apple Kernel Information Leak Vulnerability
A vulnerability that could be exploited by a malicious app to leak sensitive kernel state. Discovered by Hyunwoo Kim.
CVE-2026-43724: Apple Kernel Memory Corruption Vulnerability
A vulnerability that could be exploited by a malicious app to cause unexpected system termination or write kernel memory. Discovered by Hyunwoo…
Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild
A critical security flaw in Oracle E-Business Suite, tracked as CVE-2026-46817 (CVSS 9.8), is now actively exploited in the wild. The vulnerability,…
CVE-2025-61882: Oracle E-Business Suite Flaw Exploited by Cl0p Ransomware
A critical vulnerability in Oracle E-Business Suite (CVSS 9.8) weaponized by Cl0p ransomware operation, with early attacks since August 2025.
CVE-2026-11720 — Critical vulnerability brief
CVSS 9.3A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes…
CVE-2025-15660 — Vulnerability brief
CVE-2025-15660 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…