CVE-2026-84600

CVE-2026-84600 Shortcuts Impact: A malicious shortcut may be able to send messages without user confirmation. Description: An authorization issue was addressed with improved state management. Products: iOS and iPadOS, macOS, tvOS, visionOS, watchOS Fixed In: iOS 27 and iPadOS 27 macOS Golden Gate...

Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities

An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The updates also fix a separate iMessage flaw that could let someone added to a group access messages sent before they joined. As of today, other updat...

EUVD-2026-120407

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2.1 and iPadOS 27.2.1, visionOS 27.2.1, watchOS 27.2.1. An app may be able to access sensitive user data...

EUVD-2026-120406

An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A remote attacker may be able to join an iMessage...

CVE-2026-113963

An authorization issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 27.2.1 and iPadOS 27.2.1, tvOS 27.2.1, visionOS 27.2.1, watchOS 27.2.1. An app may be able to access sensitive user data...

CVE-2026-113961

An authorization issue was addressed with improved validation. This issue is fixed in HomeView Software Version 27.2, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A remote attacker...

CVE-2026-113963

An authorization issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 27.2.1 and iPadOS 27.2.1, tvOS 27.2.1, visionOS 27.2.1, watchOS 27.2.1. An app may be able to access sensitive user data...

CVE-2026-113961

An authorization issue was addressed with improved validation. This issue is fixed in HomeView Software Version 27.2, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A remote attacker...

CVE-2026-113961

An authorization issue in the iMessage component allows a remote attacker to join a group chat and receive its messages. This flaw was addressed by Apple through improved validation in several operating systems. Affected Products and Versions: iOS 26.7.3, 27.2.1 iPadOS 26.7.3, 27.2.1 macOS Golden...

CVE-2026-113963

An authorization issue in the App Intents framework, caused by improper state management, allows an application to access sensitive user data . This vulnerability affects iOS , iPadOS , visionOS , and watchOS versions prior to 27.2.1, as well as macOS versions prior to 27.2.1 and 26.7.3. Exploita...

PT-2026-141111

Name of the Vulnerable Software and Affected Versions iOS versions prior to 27.2.1 iPadOS versions prior to 27.2.1 visionOS versions prior to 27.2.1 watchOS versions prior to 27.2.1 macOS versions prior to 27.2.1 macOS versions prior to 26.7.3 Description An authorization issue exists within the...

CVE-2026-113961: Apple: An authorization issue was addressed with improved validation

An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A remote attacker may be able to join an iMessage...

CVE-2026-113963: Apple: An authorization issue was addressed with improved state management

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2.1 and iPadOS 27.2.1, visionOS 27.2.1, watchOS 27.2.1. An app may be able to access sensitive user data...

PT-2026-141110

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7.3 iPadOS versions prior to 26.7.3 iOS versions prior to 27.2.1 iPadOS versions prior to 27.2.1 macOS Golden Gate versions prior to 27.2.1 macOS Sequoia versions prior to 15.8.3 macOS Tahoe versions prior to 26.7.3...

macOS 15.x < 15.8.3 Multiple Vulnerabilities (149720)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.8.3. It is, therefore, affected by multiple vulnerabilities: - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote...

IBM API Connect authorization issue vulnerability

Versions 12.1.0.0 through 12.1.1.2 of IBM API Connect contain an authorization issue vulnerability. This vulnerability arises from the ability to bypass authentication via alternate paths, potentially allowing remote attackers to obtain sensitive information and gain control over gateway...

WordPress WCFM Membership authorization issue vulnerability

WordPress WCFM Membership versions 2.12.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

LINE Armeria authorization issue vulnerability

Versions of LINE Armeria prior to 1.43.0 contain an authorization issue vulnerability. This vulnerability stems from inconsistent path normalization, which may allow unauthenticated attackers to bypass path-based access controls and gain access to protected resources...

Kubeflow pipeline authorization issue vulnerability

Versions of Kubeflow Pipelines prior to 2.18.0 contain an authorization issue vulnerability. This vulnerability arises because when the target namespace is empty and REQUIRENAMESPACEFORPIPELINES is set to false, the canUploadVersionedPipeline function is invoked on both POST...

Kyverno authorization issue vulnerability

Versions prior to Kyverno 1.19.2 contain an authorization issue vulnerability. This vulnerability arises because the admission policy generator controller fails to respect --enablePolicyException, --exceptionNamespace, and policy type gateways when merging PolicyExceptions into generated...