PT-2026-27614

Name of the Vulnerable Software and Affected Versions NATS-Server versions prior to 2.11.15 NATS-Server versions prior to 2.12.6 Description NATS-Server is a high-performance server for NATS.io, a cloud and edge native messaging system. When using Access Control Lists ACLs on message subjects,...

PT-2026-27528

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.4 Description A logic issue was addressed with improved checks. This could allow a user to elevate privileges. Recommendations Update to macOS Tahoe 26.4...

PT-2026-27515

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 140.9 Thunderbird versions prior to 149 Description A spoofing issue exists in Thunderbird. Recommendations Update Thunderbird to version 140.9 or later. Update Thunderbird to version 149 or later...

RHEL 9 : osbuild-composer (RHSA-2026:5544)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:5544 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

PT-2026-27584

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.4 iOS versions prior to 18.7.7 iPadOS versions prior to 18.7.7 macOS Tahoe versions prior to 26.4 visionOS versions prior to 26.4 Description A logic issue exists due to improved state management. A malicious websit...

PT-2026-27571

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.4 Description A flaw existed where an application could potentially access sensitive user data due to an issue with logic checks. The problem was addressed with improved checks. Recommendations Update to macOS versio...

OpenClaw code issue vulnerability (CNVD-2026-14849)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a code issue vulnerability that is caused by an arbitrary shell execution flaw in the shell environment fallback. An attacker can exploit the vulnerability to execute arbitrary commands on the system...

PT-2026-27544

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.4 iOS versions prior to 26.4 iPadOS versions prior to 26.4 macOS Tahoe versions prior to 26.4 visionOS versions prior to 26.4 watchOS versions prior to 26.4 Description An authorization issue existed due to improved...

About the security content of iOS 18.7.7 and iPadOS 18.7.7

About the security content of iOS 18.7.7 and iPadOS 18.7.7 About the security content of iOS 18.7.7 and iPadOS 18.7.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

PT-2026-27562

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.4 Description A logic issue existed due to insufficient restrictions, allowing a malicious application to potentially escape its sandbox. The issue was resolved by implementing improved restrictions. Recommendations...

PT-2026-27555

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.5 macOS versions prior to 14.8.5 macOS versions prior to 26.4 Description A logging issue allowed potential access to sensitive user data by applications. The issue was resolved through improved data redaction...

PT-2026-27549

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4 Description An issue involving insufficient permissions restrictions was identified. This could allow an application to access...

PT-2026-27572

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions 15.7.5 macOS Sonoma versions 14.8.5 macOS Tahoe versions 26.4 Description A permissions issue was addressed with additional sandbox restrictions. An application may be able to break out of its sandbox. Recommendations...

PT-2026-27585

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.5 macOS versions prior to 14.8.5 macOS versions prior to 26.4 Description An issue related to the handling of private data in log entries was identified. Specifically, an application could potentially access...

PT-2026-27560

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.7.5 macOS versions prior to Sonoma 14.8.5 macOS versions prior to Tahoe 26.4 Description An authorization issue existed due to improved state management. This allowed an application to potentially access...

About the security content of watchOS 26.4

About the security content of watchOS 26.4 This document describes the security content of watchOS 26.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

Mozilla多款产品 代码问题漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code issue vulnerability exists in multiple Mozilla products that is...

PT-2026-27605

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 26.4 Description An issue involving insufficient permissions was corrected through added restrictions. An application could potentially read arbitrary files with root privileges. Recommendations Update to Xcode version...

SUSE SLES15: docker-stable / docker-stable-bash-completion / etc (SUSE-SU-2026:0972-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0972-1 advisory. - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption...

Mozilla Thunderbird < 149.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 149.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-23 advisory. - Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability affects...