CVE-2026-43796

CVE-2026-43796 is a vulnerability in Apple platforms that is fixed in macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, and in iOS 26.6 / iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. The issue allows an app to access sensitive user data, with the CVE entry describing a local attack vector ...

PT-2026-65266

This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user...

About the security content of macOS Tahoe 26.6

About the security content of macOS Tahoe 26.6 This document describes the security content of macOS Tahoe 26.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

PT-2026-65189

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versio...

PT-2026-65274

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6 Description An app may be able to access sensitive user data because information is sent over t...

The vulnerability of the console-based graphic editor ImageMagick, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the console-based graphic editor ImageMagick is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Dovecot mail server, related to insufficient protection of service data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Dovecot mail server is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Zabbix Agent 2 component of the Zabbix IT-infrastructure monitoring system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Zabbix Agent 2 component of the Zabbix IT infrastructure monitoring system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

UBUNTU-CVE-2026-13059

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

ROS-20260722-73-0016

The vulnerability of the Preload function in Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML pag...

ROS-20260722-73-0020

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to bypass the sandboxing protection mechanisms...

ROS-20260722-73-0014

The vulnerability of the Cast component in Google Chrome and Microsoft Edge relates to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security restrictions through a specially created HTML page...

ROS-20260722-73-0010

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260722-73-0026

The vulnerability of the ServiceWorker interface in Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability could allow an attacker to bypass existing security measures remotely...

The vulnerability of the Microsoft .NET Framework software lies in its data protection mechanism being compromised, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software platform is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

The vulnerability of the Content Credentials SDK libraries, related to insufficient protection of registration data, allows attackers to enhance their privileges.

The vulnerability of Content Credentials SDK libraries is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to compromise protected information

The vulnerability of the Win32k.sys component of the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Malicious code in hehehe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588dd776720f805d7d84a58c93ffcd21ed860e3fc21a48787d732eb6180b974d Package is published as an 'enterprise Windows Diagnostic Utility' but is an anti-proctoring cheating tool that also steals the installer's browser...

The vulnerability of the mirroring mechanism of the Git-based software platform for collaborative code development, GitLab EE, allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the repository mirroring mechanism of the Git-based software platform for collaborative code development in GitLab CE/EE is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the...