Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

69320

Tracked CVEs

6431

Critical

702

Exploited in wild

4534

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1587
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266
7CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

855 matches

CVE-2026-112484High· 7.8

3d ago

This issue was addressed with improved file handling

This issue was addressed with improved file handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may be able to execute arbitrary code with system privileges.

▾ TwilightApple · macOSEPSS 0.20%via CVEORG

CVE-2026-112427High· 8.1

3d ago

An authentication issue was addressed with improved state management

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution.

▾ TwilightApple · macOSEPSS 0.69%via CVEORG

CVE-2026-65327High· 8.4

3d ago

A logic issue was addressed with improved checks

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may be able to elevate their privileges.

▾ TwilightApple · macOSEPSS 0.24%via CVEORG

CVE-2026-112651High· 8.8

3d ago

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web c…

▾ TwilightApple · SafariEPSS 0.54%via CVEORG

CVE-2026-112677None

3d ago

An authorization issue was addressed with improved access control

An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An application may be able to execute arbitrary code with system privileges.

▾ SunlitApple · macOSEPSS 0.26%via CVEORG

CVE-2026-86929High· 8.8

3d ago

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to arbitrary code execution.

▾ TwilightApple · macOSEPSS 0.65%via CVEORG

CVE-2026-113943Medium· 6.5

3d ago

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

▾ SunlitApple · macOSEPSS 0.44%via CVEORG

CVE-2026-113939Medium· 6.5

3d ago

An out-of-bounds write issue was addressed with improved bounds checking

▾ SunlitApple · macOSEPSS 0.44%via CVEORG

CVE-2026-112457High· 7.1

3d ago

A double free issue was addressed with improved memory management

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected system terminati…

▾ TwilightApple · macOSEPSS 0.35%via CVEORG

CVE-2026-84496Medium· 6.5

3d ago

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt ker…

▾ SunlitApple · macOSEPSS 0.46%via CVEORG

CVE-2026-112544Medium· 6.5

3d ago

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a malicious disk image may cause unexpected system termination.

▾ SunlitApple · macOSEPSS 0.38%via CVEORG

CVE-2026-113913Medium· 6.5

3d ago

An input validation issue was addressed with improved input validation

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Proce…

▾ SunlitApple · iOS and iPadOSEPSS 0.61%via CVEORG

CVE-2026-112646Medium· 6.5

3d ago

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt …

▾ SunlitApple · iOS and iPadOSEPSS 0.55%via CVEORG

CVE-2026-112629Medium· 6.5

3d ago

An out-of-bounds read was addressed with improved bounds checking

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing…

▾ SunlitApple · iOS and iPadOSEPSS 0.60%via CVEORG

CVE-2026-112471Medium· 4.3

3d ago

A buffer overflow was addressed with improved bounds checking

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected process termination.

▾ SunlitApple · macOSEPSS 0.48%via CVEORG

CVE-2026-112708Medium· 5.3

3d ago

A race condition was addressed with improved locking

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt process memory.

▾ SunlitApple · macOSEPSS 0.15%via CVEORG

CVE-2026-112633Medium· 6.5

3d ago

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a malic…

▾ SunlitApple · iOS and iPadOSEPSS 0.55%via CVEORG

CVE-2026-112556Medium· 4.8

3d ago

A race condition was addressed with additional validation

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker may tamper with code-signed applications to execute arbitrary code in the app…

▾ SunlitApple · macOSEPSS 0.37%via CVEORG

CVE-2026-112688High· 8.8

3d ago

A memory corruption issue was addressed with improved memory handling

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Parsing a file may lead t…

▾ TwilightApple · iOS and iPadOSEPSS 0.64%via CVEORG

CVE-2026-112626High· 8.8

3d ago

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing …

▾ TwilightApple · SafariEPSS 0.57%via CVEORG

CVE-2026-112637High· 8.8

3d ago

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web conten…

▾ TwilightApple · SafariEPSS 0.54%via CVEORG

CVE-2026-84627None

3d ago

A buffer overflow was addressed with improved bounds checking

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2, visionOS 27. Processing a maliciously…

▾ SunlitApple · iOS and iPadOSEPSS 0.24%via CVEORG

CVE-2026-86925None

3d ago

An authorization issue was addressed with improved state management

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.

▾ SunlitApple · iOS and iPadOSEPSS 0.21%via CVEORG

CVE-2026-86964None

3d ago

A null pointer dereference was addressed with improved input validation

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected syst…

▾ SunlitApple · iOS and iPadOSEPSS 0.22%via CVEORG

CVE-2026-86972None

3d ago

A buffer overflow was addressed with improved size validation

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing …

▾ SunlitApple · iOS and iPadOSEPSS 0.24%via CVEORG

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

This issue was addressed with improved file handling

An authentication issue was addressed with improved state management

A logic issue was addressed with improved checks

A use-after-free issue was addressed with improved memory management

An authorization issue was addressed with improved access control

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking

A double free issue was addressed with improved memory management

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking

An input validation issue was addressed with improved input validation

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds read was addressed with improved bounds checking

A buffer overflow was addressed with improved bounds checking

A race condition was addressed with improved locking

An out-of-bounds write issue was addressed with improved bounds checking

A race condition was addressed with additional validation

A memory corruption issue was addressed with improved memory handling

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management

A buffer overflow was addressed with improved bounds checking

An authorization issue was addressed with improved state management

A null pointer dereference was addressed with improved input validation

A buffer overflow was addressed with improved size validation

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

This issue was addressed with improved file handling

An authentication issue was addressed with improved state management

A logic issue was addressed with improved checks

A use-after-free issue was addressed with improved memory management

An authorization issue was addressed with improved access control

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking

A double free issue was addressed with improved memory management

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds write issue was addressed with improved bounds checking

An input validation issue was addressed with improved input validation

An out-of-bounds write issue was addressed with improved bounds checking

An out-of-bounds read was addressed with improved bounds checking

A buffer overflow was addressed with improved bounds checking

A race condition was addressed with improved locking

An out-of-bounds write issue was addressed with improved bounds checking

A race condition was addressed with additional validation

A memory corruption issue was addressed with improved memory handling

A use-after-free issue was addressed with improved memory management

A use-after-free issue was addressed with improved memory management

A buffer overflow was addressed with improved bounds checking

An authorization issue was addressed with improved state management

A null pointer dereference was addressed with improved input validation

A buffer overflow was addressed with improved size validation

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial