CVE-2026-64699

This CVE (CVE-2026-64699) concerns a memory initialization issue that could allow an app to disclose kernel memory. Concrete details from connected sources show the vulnerability affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6, where improved memory handling mitigates the ...

EUVD-2026-49513

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to disclose kernel memory...

CVE-2026-64709

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to disclose kernel memory...

CVE-2026-64709

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to disclose kernel memory...

CVE-2026-43738

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may result in disclosure of process memory...

EUVD-2026-49482

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may result in disclosure of process memory...

CVE-2026-43738

CVE-2026-43738 affects macOS where processing a maliciously crafted asset catalog could disclose process memory. The connected sources specify the issue is resolved in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8. Root cause described as memory handling improvements; the CVE entry is tied to memo...

CVE-2026-43738

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may result in disclosure of process memory...

CVE-2026-64722

CVE-2026-64722 is a memory-corruption issue in Apple platforms: a buffer overflow that can cause disclosure of process memory when processing certain 3D models. Affected products/versions are iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6. The root cause is unspecified in th...

CVE-2026-66759

A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICNS image processing, the plugin reads from the mask data buffer without verifying if the cursor exceeds the allocated resource size. If a crafted file contains a truncated mask resource, the icnsdecompres...

CVE-2026-15003

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

CVE-2026-56391

A flaw was found in GNU coreutils uniq. When processing specially crafted multibyte input with the --check-chars option, an attacker can trigger an out-of-bounds read. This vulnerability can lead to a denial of service DoS due to an application crash and potentially expose sensitive information...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via THeaderTransport::readString in the header parsing path. An attacker can trigger the flaw by sending a crafted THeader frame with an info-header string length that exceeds the bytes remaining in the header section...

CVE-2026-64277

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. The rmif3amapgpios function incorrectly allocates memory for the gpiokeymap, making it smaller than required. This allows a device reporting a specific gpiocount value to trigger an out-of-bounds read, leading to information...

BIT-NGINX-GATEWAY-FABRIC-2026-48142 NGINX ngx_http_charset_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcharsetmodule module. When content is served or proxied through a location block with both sourcecharset utf-8; and a charset directive for example, charset koi8-r; configured, remote, unauthenticated attackers can send requests ...

PT-2026-65035

NGINX Plus and NGINX Open Source have a vulnerability in the ngx http charset module module. When content is served or proxied through a location block with both source charset utf-8; and a charset directive for example, charset koi8-r; configured, remote, unauthenticated attackers can send...

PT-2026-65239

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A memory initialization issue exists where an application may be able to disclose kernel memory. This occurs due to...

PT-2026-65255

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Tahoe versions prior to 26.6 Description A buffer overflow occurs during the processing of a 3D model, which may lead to the disclosure of...

macOS 26.x < 26.6 Multiple Vulnerabilities (128067)

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.6. It is, therefore, affected by multiple vulnerabilities: - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6,...

nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module

A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...