Apple多款产品 安全漏洞

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Vulnerabilities exist in versions of Apple macOS such as Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4. These vulnerabilities stem from improper handling of symbolic links, which may allow...

The vulnerability of the svm_range_vram_node_new() function in the drivers/gpu/drm/amd/amdkfd/kfd_svm.c driver module allows a hacker to trigger a service failure. This vulnerability targets AMD GPU-based Linux operating system graphics cards with Direct Rendering Infrastructure (DRI) support.

The vulnerability of the svmrangevramnodenew function in the drivers/gpu/drm/amd/amdkfd/kfdsvm.c driver for supporting the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems is related to improper initialization. Exploiting this vulnerability can allow an attacke...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS prior to Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 contain security vulnerabilities due to authorization issues, which may allow applications to access sensitive us...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. There were security vulnerabilities in versions of Apple iOS prior to 26.4 and Apple iPadOS prior to 26.4...

CVE-2026-26832

node-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR. In all versions through 2.2.1, the recognize function in src/index.js is vulnerable to OS Command Injection. The file path parameter is concatenated into a shell command string and passed to childprocess.exec...

The vulnerability of the mlx5e_fs_tt_redirect_any_create() function in the drivers/net/ethernet/mellanox/mlx5/core/en/fs_tt_redirect.c file of the Mellanox Ethernet network adapter driver for the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the mlx5efsttredirectanycreate function in the drivers/net/ethernet/mellanox/mlx5/core/en/fsttredirect.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended...

Moderate Photon OS Security Update - PHSA-2026-4.0-0985

Updates of 'openssh' packages of Photon OS have been released...

The vulnerability of the smu_v12_0_fini_smc_tables() function in the drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c driver module allows a attacker to cause a service failure in AMD Linux-based graphics cards with Direct Rendering Infrastructure support.

The vulnerability of the smuv120finismctables function in the drivers/gpu/drm/amd/pm/swsmu/smu12/smuv120.c driver module is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dccp_error() function in the net/netfilter/nf_conntrack_proto_dccp.c module of the netfilter component in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the dccperror function in the net/netfilter/nfconntrackprotodccp.c module of the netfilter component in the Linux operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ena_init() function in the drivers/net/ethernet/amazon/ena/ena_netdev.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the enainit function in the drivers/net/ethernet/amazon/ena/enanetdev.c file of the Ethernet network adapter driver for the Linux operating system exposes confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...

Apple多款产品 安全漏洞

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...

Apple多款产品 安全漏洞

Apple iOS and other products are owned by Apple Inc. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have security...

The vulnerabilities in the functions prelim_release() and find_parent_nodes() of the fs/btrfs/backref.c module in the btrfs file system of the Linux operating system allow a attacker to cause a service failure.

The vulnerability of the functions prelimrelease and findparentnodes in the fs/btrfs/backref.c file from the Btrfs file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition «Infinite loop». Exploiting this vulnerability could allow an...

Malicious code in @wame/ngx-frf-utilities (npm)

Malicious package due to JS obfuscation, dynamic code execution, OS/DNS access, suspicious install script, and untrustworthy project. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa63e93a0b5a6ead3de9d3680bb75a023c43b59c6db80e0072b6a239cb7d5da The package...

MAL-2026-2412 Malicious code in @wame/ngx-frf-utilities (npm)

Malicious package due to JS obfuscation, dynamic code execution, OS/DNS access, suspicious install script, and untrustworthy project. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa63e93a0b5a6ead3de9d3680bb75a023c43b59c6db80e0072b6a239cb7d5da The package...

MAL-2026-2416 Malicious code in oc-ccp-module-client (npm)

Malware due to hex obfuscation, suspicious install script, dynamic module loading, OS command access, process object access, and untrustworthy project. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2b4b9cee1369c441aa8d759bc04085a8e2b14786df20656a8c6bc249e6260...

PT-2026-27529

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.4 Description A flaw exists in how the operating system parses directory paths. This could allow an application to access sensitive user data due to insufficient path validation. Recommendations Update to macOS versi...

PT-2026-27589

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 18.7.7 Apple iPadOS versions prior to 18.7.7 Apple iOS versions prior to 26.4 Apple iPadOS versions prior to 26.4 macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions pri...

PT-2026-27574

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.4 Description A buffer overflow issue was addressed through enhanced size validation. This can lead to memory corruption and unexpected application termination. Recommendations Update to macOS Tahoe 26.4...