CVE-2026-86875

The CoreSymbolication component within Xcode 27 (available for macOS Tahoe 26.6 and later) is affected by an input validation issue . A vulnerability in how the component parses data allows a maliciously crafted binary to cause unexpected app termination . This issue has been addressed in Xcode 2...

CLEANSTART-2026-GD45765 shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`

CVE-2026-9277 affects multiple packages. shell-quote's quote function did not validate object-token inputs against the operator model used by parse. See references for individual vulnerability details...

Google Chrome Vulnerability: CVE-2026-113306

Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46044)

In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Clean up kthread on errors If an error occurs after the ssif kthread is created, but before the main IPMI code starts the ssif interface, the ssif kthread will not be stopped. So make sure the kthread is stopped on an...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46018)

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: stop parsing UAC2 rates at MAXNRRATES parseuac2sampleraterange caps the number of enumerated rates at MAXNRRATES, but it only breaks out of the current rate loop. A malformed UAC2 RANGE response with additional...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31611)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: require 3 sub-authorities before reading subauth2 parsedacl compares each ACE SID against sidunixNFSmode and on match reads sid.subauth2 as the file mode. If sidunixNFSmode is the prefix S-1-5-88-3 with numsubauth = 2 then...

Atlassian Jira Service Management Data Center and Server < 10.3.25 / 11.3.x < 11.3.11 (JSDSERVER-16788)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16788 advisory. - Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990...

Google Chrome Vulnerability: CVE-2026-113147

Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Google Chrome Vulnerability: CVE-2026-113175

Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-113292

Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

Google Chrome Vulnerability: CVE-2026-113294

Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2024-58077)

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: don't use socpcmret on .prepare callback commit 1f5664351410 'ASoC: lower 'no backend DAIs enabled for ... Port' log severity' ignores -EINVAL error message on common socpcmret. It is used from many functions,...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2025-21830)

In the Linux kernel, the following vulnerability has been resolved: landlock: Handle weird files A corrupted filesystem e.g. bcachefs might return weird files. Instead of throwing a warning and allowing access to such file, treat them as regular files. This plugin only works with Tenable.ot. Plea...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23312)

In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: validate USB endpoints The kaweth driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not ha...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46128)

In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message buffer response for bad data The event message buffer response data size got checked later when processing, but check it right after the response comes back. It appears some BMCs may return an empty...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-43110)

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF events brcmffwehhandleifevent validates the firmware-provided interface index before it touches drvr-iflist, but it still uses the raw bsscfgidx field as an array index without a...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46083)

In the Linux kernel, the following vulnerability has been resolved: spi: fix resource leaks on device setup failure Make sure to call controller cleanup if spisetup fails while registering a device to avoid leaking any resources allocated by setup. This plugin only works with Tenable.ot. Please...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23364)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. Replace the memcmp with the correct function, cryptomemneq. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53150)

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tbpropertyentryvalid accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46177)

In the Linux kernel, the following vulnerability has been resolved: ipmi: Add limits to event and receive message requests The driver would just fetch events and receive messages until the BMC said it was done. To avoid issues with BMCs that never say they are done, add a limit of 10 fetches at a...