2776 matches found
EUVD-2026-104723
An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data...
CVE-2026-86907
An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain...
CVE-2026-86907
An authorization issue in macOS allows an application with admin privileges to potentially modify the System Keychain . This vulnerability stems from insufficient entitlement checks. The issue is addressed in macOS Sequoia 15.8 and macOS Tahoe 26.7 . No specific exploit details or in-the-wild exp...
EUVD-2026-104714
An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain...
EUVD-2026-104696
An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be able to access sensitive user data...
CVE-2026-28850
An authorization issue exists in visionOS related to missing authorization (CWE-862). Due to inadequate state management, an application may be able to access sensitive user data . This vulnerability is resolved in visionOS 27 . Specific information regarding the root cause, affected components, ...
CVE-2026-28850
An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be able to access sensitive user data...
MariaDB Server Authorization Issue Vulnerability
MariaDB Server versions prior to 10.6.1 and 10.6.28, 10.11.1 and 10.11.19, 11.4.1 and 11.4.13, 11.8.1 and 11.8.9, 12.3.1 and 12.3.3, and 13.0.1 and 13.0.2 have a vulnerability related to authorization. This vulnerability stems from the fact that UDFs jsonfile, bsonfile, jfilemake, bfilemake, and...
BIT-GHOST-2026-105680 Ghost: Authorization Issue Allowed Author Role to Delete any Post
Ghost is a Node.js content management system. From 5.81.0 until 6.60.0, staff with the Author role could delete posts and pages that they did not author. This issue is fixed in version 6.60.0...
GHSA-X3MG-Q38V-M562 Ghost: Authorization Issue Allowed Author Role to Delete any Post
Impact Staff with the Author role could delete posts and pages that they did not author. Vulnerable versions This vulnerability is present in Ghost from v5.81.0 up to v6.60.0. Patches v6.60.0 contains a fix for this issue. How to update For self-hosters using Docker, find Docker's official Ghost...
Ghost: Authorization Issue Allowed Author Role to Delete any Post
Impact Staff with the Author role could delete posts and pages that they did not author. Vulnerable versions This vulnerability is present in Ghost from v5.81.0 up to v6.60.0. Patches v6.60.0 contains a fix for this issue. How to update For self-hosters using Docker, find Docker's official Ghost...
NPM: Ghost: Authorization Issue Allowed Author Role to Delete any Post
NPM: Ghost: Authorization Issue Allowed Author Role to Delete any Post vulnerability discovered by ? in WordPress Npm ghost versions = 5.81.0, 6.60.0...
CVE-2026-105680
The Ghost Node.js content management system is vulnerable to an authorization issue in versions 5.81.0 through 6.60.0 . Staff members assigned the Author role can bypass intended restrictions to delete posts and pages that they did not originally author. This vulnerability is addressed in version...
CVE-2026-105680 Ghost: Authorization Issue Allowed Author Role to Delete any Post
Ghost is a Node.js content management system. From 5.81.0 until 6.60.0, staff with the Author role could delete posts and pages that they did not author. This issue is fixed in version 6.60.0...
CVE-2026-105680 Ghost: Authorization Issue Allowed Author Role to Delete any Post
Ghost is a Node.js content management system. From 5.81.0 until 6.60.0, staff with the Author role could delete posts and pages that they did not author. This issue is fixed in version 6.60.0...
CVE-2026-95292
An incorrect authorization flaw was found in the Safebrowsing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513781838...
CVE-2026-95340
An incorrect authorization flaw was found in the PictureInPicture component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553268567...
CVE-2026-95302
An incorrect authorization flaw was found in the WebAPKs component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502242455...
