PT-2026-91639

Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27 Description An application may be able to break out of its sandbox due to improper handling of symlinks symbolic links, which are files that point to another file or directory. Recommendations Update to...

ROS-20260914-73-0006

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers on MacOS operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to bypass the sandboxing protection mechanisms...

CVE-2026-84584: Improper Link Resolution Before File Access

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox...

PT-2026-91542

Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27 macOS versions prior to Sequoia 15.8 macOS versions prior to Tahoe 26.7 Description A validation issue in the entitlement verification process allows a malicious application to bypass security restriction...

CVE-2026-65381: Missing Authorization

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox...

PT-2026-91636

The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox...

PT-2026-91667

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 visionOS versions prio...

PT-2026-91695

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox...

CVE-2026-84578: Protection Mechanism Failure

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox...

CVE-2026-84580: Missing Authorization

The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox...

CVE-2026-65354: Improper Privilege Management

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox...

PT-2026-91635

Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description A logic issue exists where an application may be able to break out of its sandbox. A sandbox is a security mechanism for...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Client component...

macOS 15.x < 15.8 Multiple Vulnerabilities (149043)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.8. It is, therefore, affected by multiple vulnerabilities: - A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is...

ALSA-2026:67133 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Client component...

ALSA-2026:67129 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Client component...

Amazon Linux 2023 : runc (ALAS2023-2026-2138)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2138 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, . to execute repeatedly on the same...

Medium: nerdctl

Issue Overview: A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be...

ROS-20260914-73-0098

The vulnerability of the Read Anything component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to escape the sandbox environment by using a specially created HTML page...

Amazon Linux 2 : runc (ALASNITRO-ENCLAVES-2026-119)

The version of runc installed on the remote host is prior to 1.3.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-119 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name...