CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Visual Studio Improper Certificate Validation Vulnerability (CVE-2026-118147) Security Advisory
[Affected Scope] Microsoft Visual Studio product suites
[Impact] An unauthorized network attacker can perform Man-in-the-Middle (MitM) spoofing attacks to intercept sensitive data or spoof trusted endpoints
[Mitigation] Apply the latest security updates via the Microsoft Security Update Guide
Check Point Quantum Security Gateway Remote Code Execution (RCE) Vulnerability (CVE-2026-85102)
[Affected Scope] All Check Point Quantum Security Gateway versions with VPN Blade enabled.
[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges, leading to full gateway compromise.
[Mitigation] Immediately apply the latest Jumbo Hotfix and enforce strict certificate validation policies.
Apple iOS, iPadOS, and macOS Certificate Validation Bypass Vulnerability (CVE-2023-41991) Analysis and Mitigation Guide
[Affected Scope] Apple devices running iOS versions prior to 16.7, iPadOS versions prior to 16.7, and macOS Ventura versions prior to 13.6
[Impact] A malicious application can bypass signature and certificate validation, allowing it to execute with elevated privileges and compromise the system. This has been actively exploited in the wild
[Mitigation] Immediately update all affected devices to iOS/iPadOS 16.7 or later, and macOS Ventura 13.6 or later