42801 matches found
Wireshark 1.8.x < 1.8.4 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.4 advisory. - Integer overflow in the dissectsackchunk function in epan/dissectors/packet-sctp.c in the SCTP dissecto...
IOKit DoS
The vulnerability of the IOKit component in operating systems such as macOS, iOS, iPadOS, and watchOS is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Wireshark 1.10.x < 1.10.7 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.10.7. It is, therefore, affected by a vulnerability as referenced in the wireshark-1.10.7 advisory. - The srtpaddaddress function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before...
Microsoft, Adobe, Apple, and Foxit vulnerabilities
Cisco Talos' Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco 's third-party vulnerability disclosure policy...
CVE-2026-88514
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
CVE-2026-106059
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...
EUVD-2026-94307
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...
CVE-2026-106059 GitAhead through 2.7.1 on macOS Command Injection via Show in Finder AppleScript
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...
CVE-2026-106059
GitAhead versions through 2.7.1 on macOS are vulnerable to a command injection vulnerability (CWE-78). The root cause is the unescaped interpolation of repository filenames into the Show in Finder AppleScript . An attacker can execute arbitrary shell commands by committing a file with a path cont...
CVE-2026-106059 GitAhead through 2.7.1 on macOS Command Injection via Show in Finder AppleScript
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...
CVE-2026-43805-PoC
CVE-2026-43805: IODMACommand State Race Analysis and PoC This is an analysis that found the missing state lock in Apple IOKit's IODMACommand::PerformOperationImpl through a macOS 26.5/26.6 kernel binary diff. In the vulnerable build, while PerformOperation is using the ready state and memory...
EUVD-2026-94050
In sshd in OpenSSH through 10.6, use of the macOS 27 or later SDK has the side effect of loss of sandboxing, which is potentially unexpected...
Wireshark 1.8.x < 1.8.9 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.9 advisory. - The dissectperlengthdeterminant function in epan/dissectors/packet-per.c in the ASN.1 PER dissector in...
Wireshark 1.4.x < 1.4.10 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.10. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.10 advisory. - The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark...
Wireshark 1.12.x < 1.12.9 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.9 advisory. - The ngsnifferprocessrecord function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark...
CVE-2026-106059: Improper Neutralization of Special Elements used in an OS Command
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...
CVE-2026-88514: Exposure of Sensitive Information to an Unauthorized Actor
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
CVE-2026-88514
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
