CVE-2026-28903

CVE-2026-28903 affects WebKitGTK4 (webkitgtk4) in Amazon Linux 2 AL2. The issue is a memory handling/problem in processing malicious web content that may trigger an unexpected process crash. Fixes are shipped as webkitgtk4 2.52.4-1.amzn2 (and related devel/jsc packages) in ALAS2-2026-3381; update...

CVE-2026-28915

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to gain root privileges...

CVE-2026-28978

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A malicious app may be able to break out of its sandbox...

CVE-2026-28978

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A malicious app may be able to break out of its sandbox...

CVE-2026-28978

CVE-2026-28978 is a macOS sandbox-permissions issue addressed by Apple in security content updates. The vulnerability allows a malicious app to break out of its sandbox, with fixed versions listed as macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5. Public documents (NVD, RH, EUVD,...

CVE-2026-28914

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28914

The CVE-2026-28914 entry concerns a logic issue in macOS related to file handling that allows a maliciously crafted ZIP archive to bypass Gatekeeper checks. It is fixed in macOS Tahoe 26.5. Affected: macOS Tahoe family (Tahoe 26.5 fix mentioned). Root cause: logic issue in how files are handled d...

CVE-2026-28914

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-43666

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An attacker on the local network may be abl...

CVE-2026-28902

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-28902

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-28955

CVE-2026-28955 is an Apple memory-handling issue triggered by processing malicious web content that could cause an unexpected process crash. The connected sources confirm the root cause relates to memory management weaknesses and state that the vulnerability is fixed in the following updates: iOS...

CVE-2026-28847

CVE-2026-28847 concerns a memory handling issue in WebKit/Web content processing that could trigger a crash when processing maliciously crafted content. Apple’s advisories indicate this vulnerability is fixed in Safari 26.5 and related OS updates (iOS 18.7.9 / iPadOS 18.7.9, macOS Tahoe 26.5, tvO...

CVE-2026-28922

CVE-2026-28922 affects macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5. Root cause: improved state management in CoreMedia. Impact: an app may be able to access private information. Remediation: patches included in the specified macOS updates (Sequoia 15.7.7, Sonoma 14.8.7, Tahoe ...

CVE-2026-28922

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to access private information...

CVE-2026-28830

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data...

CVE-2026-28830

CVE-2026-28830 describes a race condition resolved by additional input validation. Multiple connected sources (NVD, EUVD-2026-29216, CVE listings, and vulnerability enrichment) indicate the issue is fixed in macOS Tahoe 26.4 and that an app could potentially access sensitive user data. The availa...

CVE-2026-28830

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data...

CVE-2026-39870

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. Processing a maliciously crafted image may corrupt process memory...

CVE-2026-28918

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Parsing a maliciously crafted file may lead to an unexpected app termination...