Search CVEs, research… / diras.sa

UPDATED SEP 30, 2026

CVE Radar: latest vulnerabilities, exploited CVEs and patches

A daily, analyst-curated feed of new and actively exploited CVEs, with severity, exploitation status, affected versions and remediation steps for each.

  1. CVE-2026-28606
    Android pairing bypass lets remote attacker escalate privileges Google Android ·
    CRITICAL 9.8
  2. CVE-2026-49921
    Android heap buffer overflow remote code execution Google Android ·
    CRITICAL 9.8
  3. CVE-2026-58822
    Android ftsmooth improper casting remote code execution Google Android ·
    CRITICAL 9.8
  4. CVE-2026-87534
    Chrome WebView missing authorization allows bypass via crafted network traffic Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  5. CVE-2026-87544
    Chrome incorrect authorization allows access to privileged Extensions page Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  6. CVE-2026-87595
    Chrome server-side request forgery in Mobile via crafted HTML Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  7. CVE-2026-85025
    Langflow OSS unauthenticated code execution via public MCP endpoints IBM Langflow OSS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  8. CVE-2026-79724
    Langflow OSS command injection allows remote OS command execution IBM Langflow OSS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  9. CVE-2026-81204
    Langflow OSS code injection during graph construction allows remote code execution IBM Langflow OSS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  10. CVE-2026-65414
    IOS and iPadOS out-of-bounds write remote code execution Apple iOS and iPadOS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  11. CVE-2026-84520
    MacOS kernel buffer overflow lets local attacker corrupt kernel memory Apple macOS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  12. CVE-2026-84561
    IOS and iPadOS double free lets remote code execution / kernel corruption Apple iOS and iPadOS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  13. CVE-2026-84609
    IOS and iPadOS permissions bug lets an app modify protected system files Apple iOS and iPadOS ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  14. CVE-2026-92036
    Firefox memory-safety flaw in HTTP networking allows remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  15. CVE-2026-92037
    Firefox DOM animation boundary bug allows pre-auth remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  16. CVE-2026-92061
    Firefox process sandboxing buffer overflow remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  17. CVE-2026-92066
    Firefox sandbox escape leading to remote code execution Mozilla Firefox ·
    CRITICAL 9.8
  18. CVE-2026-55366
    Android kernel IMS authentication bypass remote privilege escalation Google Android ·
    CRITICAL 9.8
  19. CVE-2026-56960
    Android kernel use-after-free remote privilege escalation Google Android ·
    CRITICAL 9.8
  20. CVE-2026-69399
    Azure ARC elevation of privilege via network Microsoft Azure ARC ·
    • PATCH AVAILABLE
    CRITICAL 9.8
20 CVEs · page 11 of 23

About CVE Radar

CVE Radar tracks newly published Common Vulnerabilities and Exposures (CVEs) from NVD, the CISA Known Exploited Vulnerabilities catalog and vendor security advisories. Each entry is reviewed by Diras Labs analysts and includes affected versions, exploitation status, remediation guidance and relevance to organizations in Saudi Arabia and the GCC.