CVE-2026-62435

The connected documents describe CVE-2026-62435 as a race condition in Xen’s Grant Table handling when switching between v1 and v2. The root cause is that code holding, but temporarily dropping and then re-acquiring the grant table lock, may incorrectly assume properties won’t change during the l...

vulnerabilities found in Apple MacOS

Apple has addressed several vulnerabilities in MacOS, specifically in the versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.x. These vulnerabilities involve various security issues in macOS, including insufficient sandbox restrictions, which may allow applications to gain unauthorized access t...

GHSA-RJR7-JGGH-PGCP vulnerabilities

Vulnerabilities for packages: zitadel, karma-fips...

GHSA-PGH9-MPWC-8JJF vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-PM4M-PH32-GHV5 vulnerabilities

Vulnerabilities for packages: authentik-fips...

GHSA-C2RV-HWQM-WJPG vulnerabilities

Vulnerabilities for packages: opensearch...

GHSA-9M94-W2VQ-HCF9 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: neo4j, confluent-kafka...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: neo4j, confluent-kafka...

GHSA-2FVJ-HGJ9-J2GR vulnerabilities

Vulnerabilities for packages: neo4j, confluent-kafka...

GHSA-MFG7-5GFP-C4W3 vulnerabilities

Vulnerabilities for packages: apicurio-registry...

USN-8620-1: Linux kernel vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

Visual CSS Style Editor < 7.5.4 - Cross-Site Scripting

The plugin does not sanitise and escape the wyppagetype parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue id: CVE-2021-24934 info: name: Visual CSS Style Editor 7.5.4 - Cross-Site Scripting author: Splint3r7 severity: medium description: | The...

Pretty Url <= 1.5.4 - Cross-Site Scripting

Plugin does not sanitize and escape the URL field in the plugin settings, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. id: CVE-2023-2009 info: name: Pretty Url = 1.5.4 -...

CVE-2026-64783

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:25+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:45:03+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 13:18:43+00:00| seen|...

CVE-2026-64774

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:18+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:45:08+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984...

CVE-2026-64772

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:15+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:45:06+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984...

CVE-2026-64771

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:12+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728...

CVE-2026-64770

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:10+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728...

CVE-2026-64768

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:05+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728...