181450 matches found
CVE-2026-84577
CVE-2026-84577 is an access issue in macOS that allows an app to bypass sandbox restrictions . The vulnerability was addressed with additional sandbox restrictions and is fixed in macOS Golden Gate 27 and macOS Tahoe 26.7 . The CVSS 3.1 score is 8.2 (HIGH) with a local attack vector, low complexi...
CVE-2026-84577
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to bypass sandbox restrictions...
EUVD-2026-78000
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to bypass sandbox restrictions...
CVE-2026-86911
CVE-2026-86911 is a clickjacking protection bypass in macOS Golden Gate 27 that can allow a malicious app to bypass secure prompt protections. The root cause is an improper state management issue, addressed with improved state management in the same release. The CVSS v3.1 base score is 5.5 (Mediu...
EUVD-2026-77986
This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...
CVE-2026-86911
This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...
CVE-2026-65369
CVE-2026-65369 is a Gatekeeper bypass vulnerability in macOS , caused by a logic issue in state management. A malicious application can bypass Gatekeeper checks, allowing unauthorized code to run on the system. The flaw is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 ...
EUVD-2026-77971
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may bypass Gatekeeper checks...
CVE-2026-12763
IBM Langflow OSS (versions 1.0.0 through 1.11.5) is affected by improper cache key isolation in the MCP Tools component . The component caches discovered MCP tools in a shared process-local cache keyed only by the MCP server display name, without incorporating the user, session, flow, or resolved...
CVE-2026-12763 Langflow is vulnerable to authentication bypass and insufficient session expiration
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP server context due to improper cache key isolation in the MCP Tools component...
CVE-2026-36425
CVE-2026-36425 : OPSWAT AppRemover Arbitrary Process Termination A signed OPSWAT kernel driver that kills any process on demand. No admin rights needed, no privilege checks, no questions asked. Point it at an EDR, an antivirus, a PPL-protected process and it dies. Three different kill methods, al...
CVE-2026-51385
CVE-2026-51385 Aviso para CVE-2026-51385. Necesario publicarlo ya que GRAPHIFY no ha reconocido el aviso ni lo ha publicado, y MITRE asignó CVE-2026-51385, este es el aviso correspondiente. ES: Este fue mi primer cve, para ser honesto encontre una manera de romper la logica en la funcion ANTI SSR...
CVE-2026-65838
Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.35, the opaAuthorizeRequestWithBody filter in filters/openpolicyagent/openpolicyagent.go can allow an oversized declared Content-Length request to bypass a deny-on-presence Rego policy because...
CVE-2026-55244
ASTEVAL is an evaluator of Python expressions and statements. Prior to 1.0.9, FROMPY in asteval/astutils.py exposes BaseException, SystemExit, KeyboardInterrupt, and GeneratorExit to expressions evaluated by asteval.Interpreter.eval, while run and eval in asteval/asteval.py catch Exception rather...
DEBIAN-CVE-2026-19816
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
CVE-2026-19816
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
CVE-2026-16435
IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features...
CVE-2026-16190
IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability...