Mozilla Firefox < 149.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 149.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-20 advisory. - Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability affects Firefox...

PT-2026-27553

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.7.5 macOS versions prior to Sonoma 14.8.5 macOS versions prior to Tahoe 26.4 Description An issue involving path handling was addressed through enhanced validation. An application may be capable of deleting...

PT-2026-27528

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.4 Description A logic issue was addressed with improved checks. This could allow a user to elevate privileges. Recommendations Update to macOS Tahoe 26.4...

PT-2026-27593

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.4 iOS versions prior to 18.7.7 iPadOS versions prior to 18.7.7 macOS Tahoe versions prior to 26.4 Description A logic issue exists that, if exploited via a maliciously crafted website, may lead to a cross-site...

PT-2026-27575

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.4 Description A buffer overflow issue exists that could lead to memory corruption and unexpected application termination. The problem was addressed with improved bounds checks. Recommendations Update to macOS...

PT-2026-27574

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.4 Description A buffer overflow issue was addressed through enhanced size validation. This can lead to memory corruption and unexpected application termination. Recommendations Update to macOS Tahoe 26.4...

PT-2026-27542

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.4 iPadOS versions prior to 26.4 macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4 visionOS versions prior to 26.4 Description A flaw exists in path handling...

PT-2026-27536

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.4 iOS versions prior to 18.7.7 iPadOS versions prior to 18.7.7 macOS Tahoe versions prior to 26.4 tvOS versions prior to 26.4 visionOS versions prior to 26.4 watchOS versions prior to 26.4 Description The issue...

Malicious Package

Overview carbon-mac-copy-cloner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Stable Channel Update for Desktop

The Stable channel has been updated to 146.0.7680.164/165 for Windows/Mac and 146.0.7680.164 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

CVE-2026-4554

A security flaw has been discovered in Tenda F453 1.0.0.3. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been released to the...

CVE-2026-4554

A security flaw has been discovered in Tenda F453 1.0.0.3. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been released to the...

CVE-2026-4554 Tenda F453 WriteFacMac FormWriteFacMac privilege escalation

A security flaw has been discovered in Tenda F453 1.0.0.3. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been released to the...

PT-2026-27019

A security flaw has been discovered in Tenda F453 1.0.0.3. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been released to the...

Tenda F453 命令注入漏洞

The Tenda F453 is a wireless router produced by the Chinese company Tenda. The Tenda F453 1.0.0.3 version has a command injection vulnerability. This vulnerability stems from incorrect handling of the parameter “mac” in the file/goform/WriteFacMac, which may lead to command injection...

EUVD-2026-13754

A vulnerability was determined in Tenda A18 Pro 02.03.02.28. The impacted element is the function sub423B50 of the file /goform/setMacFilterCfg of the component MAC Filtering Configuration Endpoint. Executing a manipulation of the argument deviceList can lead to stack-based buffer overflow. The...

EUVD-2026-13738

A vulnerability has been found in Tenda A18 Pro 02.03.02.28. Impacted is the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument list leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public a...

CVE-2026-4493

A vulnerability was determined in Tenda A18 Pro 02.03.02.28. The impacted element is the function sub423B50 of the file /goform/setMacFilterCfg of the component MAC Filtering Configuration Endpoint. Executing a manipulation of the argument deviceList can lead to stack-based buffer overflow. The...

CVE-2026-4493

CVE-2026-4493 : A stack-based buffer overflow vulnerability exists in Tenda A18 Pro firmware version 02.03.02.28, specifically in the MAC Filtering Configuration Endpoint’s file /goform/setMacFilterCfg, within the function sub_423B50. By manipulating the argument deviceList, an attacker can cause...

CVE-2026-4493

A vulnerability was determined in Tenda A18 Pro 02.03.02.28. The impacted element is the function sub423B50 of the file /goform/setMacFilterCfg of the component MAC Filtering Configuration Endpoint. Executing a manipulation of the argument deviceList can lead to stack-based buffer overflow. The...