CVE-2026-15012 Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

CVE-2026-51271

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

PT-2026-65607

Name of the Vulnerable Software and Affected Versions datamodel-code-generator versions 0.59.0 through 0.61.0 Description When generating Python data models from an XML Schema using the --input-file-type xmlschema option, the software improperly resolves schemaLocation values within , , , and...

PT-2026-65621

Name of the Vulnerable Software and Affected Versions Pagy versions 43.0.0 through 43.5.5 Description In the Pagy::I18n.locale= setter within gem/lib/pagy/modules/i18n/i18n.rb, locale values are stored verbatim and subsequently used as path components to load YAML dictionary files. When an...

Linux Distros Unpatched Vulnerability : CVE-2026-17574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type fie...

github.com/moby/buildkit: BuildKit: Information Disclosure via Improper Handling of NTFS Directory Junctions

A flaw was found in BuildKit. An untrusted user, when authoring a build on a Windows Container on Windows WCOW configured BuildKit daemon, can exploit a vulnerability in the cache mount source selector. This flaw allows the user to read arbitrary files from the host system, leading to information...

CVE-2026-64766

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or...

CVE-2026-64765

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or...

CVE-2026-64754

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to a denial-of-service...

CVE-2026-43747

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Parsing a maliciously crafted file may lead to an unexpected app termination...

EUVD-2026-49446

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution...

CVE-2026-43776

CVE-2026-43776 is a buffer overflow vulnerability described by Apple and NVD as addressed with improved bounds checking. Affected platforms include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6. The issue could allow processing of a maliciously crafted file to terminate an app...

CVE-2026-64707

A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6. An app may be able to delete files for which it does not have permission...

CVE-2026-64707

CVE-2026-64707 : A permissions issue in the BackgroundAssets component allowed an app to delete files for which it had no permission. Root cause cited as insufficient validation in deletion/permission checks. Fixed in macOS Sonoma 14.8.8, macOS Sequoia 15.7.8, macOS Tahoe 26.6, iOS/iPadOS 26.6, a...

EUVD-2026-49432

A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6. An app may be able to delete files for which it does not have permission...

CVE-2026-43747

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Parsing a maliciously crafted file may lead to an unexpected app termination...

EUVD-2026-49563

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or...

CVE-2026-64766

According to connected advisories, CVE-2026-64766 involves an integer overflow in Apple device software that is mitigated by input validation fixes. The issue affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.x, and related iOS/iPadOS/watchOS/tvOS/visionOS versions, with the impac...

CVE-2026-64766

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or...

CVE-2026-43744

CVE-2026-43744 describes an out-of-bounds write in CoreAudio when processing an audio stream from a maliciously crafted media file. The issue is addressed in Apple's security updates: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and...