PT-2026-123462

Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but MicImageFile.tell reports the OLE stream index and its seek resets TIFF frame state, so an embedded TIFF...

PT-2026-123270

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Panorama Viewer – 360 Degree Image + Video Viewer panorama allows Stored XSS.This issue affects Panorama Viewer – 360 Degree Image + Video Viewer: from n/a through 1.8.3...

PT-2026-125398

A logic issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted disk image may bypass Gatekeeper checks...

Apple MacOS: CVE-2026-86971: OS X update for Accelerate Framework

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may lead to unexpected a...

PT-2026-125368

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

PT-2026-125473

Name of the Vulnerable Software and Affected Versions FLTK versions prior to 1.4.6 Description An integer overflow occurs in the load bmp function. This issue allows an attacker to provide a specially crafted BMP or ICO file with large dimensions, leading to an undersized pixel buffer allocation...

Apple MacOS: CVE-2026-65368: OS X update for CoreServicesUIAgent

A logic issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted disk image may bypass Gatekeeper checks...

PT-2026-125168

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected process termination...

WordPress Image Gallery Block cross-site scripting vulnerability

WordPress Image Gallery Block versions 2.4.1 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

PT-2026-125272

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected app termination...

PT-2026-125372

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

PT-2026-125472

Name of the Vulnerable Software and Affected Versions FLTK versions prior to 1.4.6 Description A stack-based buffer overflow exists in the load bmp function. An attacker can corrupt stack memory by providing a BMP or ICO file with a colors used field exceeding 256. This action overflows the...

PT-2026-125407

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

PT-2026-123240

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Image Gallery block – Create and display photo gallery/photo album. 3d-image-gallery allows Stored XSS.This issue affects Image Gallery block – Create and display photo gallery/photo album...

PT-2026-123464

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter i...

PT-2026-125255

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted imag...

PT-2026-125246

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may...

FastStone Image Viewer buffer error vulnerability

FastStone Image Viewer versions 8.5 and earlier contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds read issue in the FUN0062d96c function within the Box-Average Downsampler Engine component, allowing remote attackers to exploit it...

PT-2026-125184

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may corrupt process memory...

Geesondog Rhaphp server-side request forgery vulnerability

Geesondog Rhaphp has a server-side request forgery vulnerability. This vulnerability stems from improper handling of the ‘url’ parameter in the image function within the file application/mp/controller/Show.php in the Mp Module Media Proxy component, potentially leading to server-side request...