CVE-2026-96394

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...

zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory

In zip 9.0.0-pre2, ZipArchive::extract creates a symbolic link from an archive entry after validating only the output entry path. The link target bytes are passed directly to the platform symlink API, so a malicious archive can create an entry inside the destination that resolves to an...

santa

Santa !NOTE A partir de 2025, Santa ya no cuenta con el mantenimiento de Google. Animamos a los usuarios actuales a migrar a un fork de Santa que se mantenga activamente, como https://github.com/northpolesec/santa. Santa es un sistema de autorización de acceso a binarios y archivos para macOS...

arpy

Arpy Arpy es una herramienta MiTM de suplantación de ARP fácil de usar para Mac. Proporciona 3 funciones específicas: Sniffing de paquetes Dominios visitados Dominios visitados con Gource Cada función se explicará a continuación. SO probados hasta la fecha Darwin 14.3.0 Darwin Kernel Version 14.3...

kemon

Kemon Un framework de código abierto basado en callbacks Pre y Post para la monitorización del kernel de macOS. Noticias de última hora - 08/28/2019 Notas de la versión de macOS Catalina 10.15 Beta 7 https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes...

CLEANSTART-2026-EU28747 mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS

Security vulnerability affects the external-secrets-operator-fips package. The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS...

SUSE CVE-2026-43670

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy...

CVE-2026-96395: Out-of-bounds Read

The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...

CVE-2026-96394: Buffer Over-read

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...

CVE-2026-96396: Heap-based Buffer Overflow

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...

Wireshark 1.12.x < 1.12.5 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.5 advisory. - The detectversion function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x...

Malicious code in sharpnes (crates.io)

sharpnes is a malicious crate published to crates.io on 2026-10-09 by the account crows7781-glitch versions 0.1.0 and 0.1.1, described only as "The sharpnes project is a learn.". It is an infostealer that exfiltrates data to attacker-controlled Telegram bots when the exported async function...

CVE-2026-11318

Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers can invoke the...

EUVD-2026-95287

Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers can invoke the...

CVE-2026-11318 Deskin 3.3.4.3 XPC Service Privilege Escalation via Unauthenticated Installer

Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers can invoke the...

electroniz3r

electroniz3r Prendi il controllo dei permessi TCC delle app Electron su macOS con electroniz3r. Lo strumento è stato presentato per la prima volta al DEFCON31 a Las Vegas durante il mio talk ELECTRONizing macOS privacy - a new weapon in your red teaming armory. Panoramica $ electroniz3r OVERVIEW:...

SUSE CVE-2026-86898

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting...

CVE-2026-11318: Missing Authentication for Critical Function

Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers can invoke the...

PT-2026-108217

Name of the Vulnerable Software and Affected Versions Deskin versions prior to 3.3.4.4 Description A privilege escalation issue exists in the com.deskin.service.installer XPC service. Local unprivileged attackers can connect to this root-owned service without authentication to execute arbitrary...

Wireshark 1.4.x < 1.4.9 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.9 advisory. - Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service application crash via...