Apple Safari resource management error vulnerability (CNVD-2026-28245)

Apple Safari is a web browser designed for the Apple operating system. Apple Safari has a resource management vulnerability, which stems from improper memory management leading to incorrect memory references. Attackers can exploit this vulnerability by processing maliciously crafted web content,...

Apple Safari WebKit stack overflow vulnerability

Apple Safari is a cross-platform web browser product developed by Apple. It primarily provides functions for rendering and browsing web content. Apple Safari has a stack overflow vulnerability, which stems from an inability to properly validate input data. Attackers can exploit this vulnerability...

Multiple Mozilla products have vulnerabilities due to improper exception handling.

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Apple Safari resource management error vulnerability (CNVD-2026-26365)

Apple Safari is a web browser developed by Apple Inc. It serves as the default browser for iOS, iPadOS, and macOS systems. It supports web browsing, extended features, and synchronization across multiple platforms. There is a resource management vulnerability in Apple Safari. This vulnerability...

Apple Safari buffer overflow vulnerability (CNVD-2026-26339)

Apple Safari is a web browser developed by Apple Inc. It primarily runs on iOS, iPadOS, and macOS operating systems, used to display web page content. Apple Safari has a security vulnerability. This vulnerability stems from improper handling of maliciously crafted web content, resulting in memory...

Apple Safari WebKit memory corruption vulnerability (CNVD-2026-26340)

Apple Safari is a web browser developed by Apple Inc., utilizing the WebKit rendering engine. It primarily serves the function of browsing web pages. Apple Safari has a memory corruption vulnerability. This vulnerability stems from the failure to properly manage memory when processing maliciously...

CVE-2026-43727

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari...

CVE-2026-43745

An out-of-bounds write vulnerability exists in Safari , iOS , iPadOS , macOS Tahoe , tvOS , and watchOS due to insufficient input validation. Processing maliciously crafted web content can result in an unexpected Safari crash . The issue has been addressed in versions Safari 26.5.2 , iOS 18.7.10 ...

CVE-2026-43745

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an...

EUVD-2026-40188

A stack overflow was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-58058

A flaw was found in Nmap. A remote attacker or a scanned target can send a specially crafted IPv6 response with a truncated extension header. This can lead to an integer underflow, causing out-of-bounds reads and a denial of service DoS due to a crash during raw IPv6 scans. Mitigation Mitigation...

CVE-2026-58050

A flaw in libssh2 allows a malicious SSH server to trigger a memory overflow by sending a manipulated attribute count. This can cause the connecting client to crash or allow unauthorized code execution. Mitigation To mitigate this issue,ensure your applications are running strictly on 64-bit...

OPENSUSE-SU-2026:21166-1 Security update for nano

This update for nano fixes the following issues: Changes in nano: - Update to version 9.1: When searching, the viewport is placed snug left where possible. The ability to read and write files in old Mac format a lone carriage return as line ending was removed. The ^T toggle between WhereIs and...

PT-2026-53679

Name of the Vulnerable Software and Affected Versions p11-kit affected versions not specified Description A flaw exists in the RPC message attribute parsing process. The functions p11 rpc message get attribute and p11 rpc message get attribute array value create a mutually-recursive call chain th...

PT-2026-53730

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 Description An out-of-bounds write issue exists where processing maliciously crafted web content may lead to an...

CVE-2026-53307

In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fully validate 'pinmux' property The pinconfgenericparsedtpinmux assumes that the 'pinmux' property is not empty when present. This might be not true. With that, the allocator will give a special value i...

CVE-2026-48090 Envoy HTTP: OAuth2 filter late async token completion after stream teardown (UAF / crash risk)

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, the HTTP OAuth2 filter envoy.filters.http.oauth2 can leave an in-flight async token exchange attached to a downstream stream that has already been torn down. A late...

CVE-2026-44018

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS...

EUVD-2026-39790

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS...

CVE-2026-44018 Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS...