SUSE CVE-2026-43701

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox...

SUSE CVE-2026-43705

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption...

SUSE CVE-2026-43712

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash...

SUSE CVE-2026-43713

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website may leak sensitive data...

SUSE CVE-2026-43716

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

SUSE CVE-2026-43721

This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to silently hijack clipboard data...

ROS-20260716-73-0024

The vulnerability of the Omnibox address bar in the Google Chrome browser on iOS operating systems is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

Cisco IOS XE CVE-2023-20198 detection

Detects Cisco IOS XE Web UI and flags CVE-2023-20198 by comparing the advertised IOS XE version against Cisco fixed releases. Falls back to a WSMA show version probe only when the version cannot be read from the Web UI page. !/usr/bin/env python3 -- coding: utf-8 -- import re from typing import...

Cisco IOS CMP CVE-2017-3881 telnet exposure

Passive check for CVE-2017-3881 exposure: telnet reachable on a Cisco IOS or IOS XE device. CMP malformed-option handling is tied to telnet session negotiation; confirm patch level separately before exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Cisco IOS telnet exposure for...

Microsoft 365 Copilot iOS Privilege Escalation

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant in iOS operating systems is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

EUVD-2026-44305

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-58617

CVE-2026-58617 affects Microsoft 365 Copilot for iOS. Connected sources describe an improper access control that allows an unauthorized attacker to elevate privileges over the network. Root cause reported as access control deficiencies in the iOS Copilot component; impact is privilege escalation ...

CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability

...

M365 Copilot for iOS Elevation of Privilege Vulnerability

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-58617: Improper Access Control

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...

KLA91179 ACE vulnerability in Microsoft Browser

Arbitrary code execution vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-48561 Exploitation CVE list CVE-2026-48561 unknown Solution Install necessary updates from the Settings and more menu, that...

CVE-2026-58595: Improper Restriction of Rendered UI Layers or Frames

Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-14906

Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4...

CVE-2026-14906 Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS

Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4...

CVE-2026-14906 Malicious webpage titles could allow overwriting of bundled PDF resources when saving webpages as PDFs in Firefox for iOS

Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4...