The vulnerability of the driver/cpuidle/cpuidle.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/cpuidle/cpuidle.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `csio_scsi.c` component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the csioscsi.c component in the Linux operating system’s kernel is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-76854

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

PT-2026-76820

Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.296, a malicious Deskflow server can send an odd-length DSOP vector to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp, causing the missing value after the final option key to be read beyond the vect...

PT-2026-76849

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.10 iPadOS versions prior to 18.7.10 iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description Processing maliciously crafted web content in Safari may lead to an...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099701 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free in rmnetdellink rmnetdellink removes the endpoi...

PT-2026-76848

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-68004

An issue in OSSRS SRS Simple Realtime Server...

PT-2026-76836

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.6.1 iOS versions prior to 18.7.10 iPadOS versions prior to 18.7.10 iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description A use-after-free issue exists in the...

The vulnerability of the kexec module in the Linux operating system allows a hacker to trigger a system failure.

The vulnerability of the kexec module in the Linux operating system is related to a deficiency in the mechanism for verifying the source of the code. Exploiting this vulnerability can allow an attacker to cause a system failure...

PT-2026-76843

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

PT-2026-76717

Name of the Vulnerable Software and Affected Versions deepmerge-ts versions prior to 8.0.0 Description The library fails to track visited objects or object pairs during the recursive merging of records. When two input values contain self-references at the same property path, the merge logic...

PT-2026-76822

Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP values to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons m...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101087 advisory. A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099969)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099969 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidppgetreportlength Do not crash when a report has no...

Unity Linux 20.1070e Security Update: mtr (UTSA-2026-099537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099537 advisory. mtr is vulnerable to Out-of-bound read vulnerability in ipinfolookup function. An attacker who can influence the TXT response used for AS lookups can trigger this bu...

PT-2026-76853

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

The vulnerability of the au1200fb.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the au1200fb.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rapidio component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the rapidio component in the Linux operating system’s kernel is related to the release of an incorrect pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099973 advisory. In the Linux kernel, the following vulnerability has been resolved: nouveau/dpcd: return EBUSY for aux xfer if the device is asleep If we have runtime suspended, and...