CVE-2026-43803

The CVE describes an out-of-bounds write fixed in multiple Apple platforms: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The underlying issue is an out-of-bounds write addressed by improved bounds checking; a remot...

CVE-2026-64770

CVE-2026-64770 describes an out-of-bounds write issue addressed by improved bounds checking. The vulnerability is fixed in Apple OS updates: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6. A remote attacker may cause unexpected appl...

CVE-2026-43802

CVE-2026-43802 is an out-of-bounds write issue that was fixed by improved bounds checking. Affected macOS versions include Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. An app may terminate unexpectedly due to this issue. The only published fix is the indicated OS updates; no exploitation detail...

CVE-2026-64764

CVE-2026-64764 describes an out-of-bounds write that is mitigated by bounds checking fixes in Apple OS updates. Affected products include iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6; and watchOS 26.6. Processing a maliciously cra...

CVE-2026-43744

CVE-2026-43744 describes an out-of-bounds write in the audio processing path when handling a maliciously crafted media file, resolved by improved bounds checking. Affected platforms include AppleOS family: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS...

CVE-2026-43748

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination...

CVE-2026-43748

CVE-2026-43748 describes an out-of-bounds write issue resolved by improved bounds checking. Affected macOS versions: Sequoia 15.7.8 and Tahoe 26.6. The issue could allow an app to cause an unexpected system termination. Current documents do not provide concrete exploit details or affected compone...

CVE-2026-64769

CVE-2026-64769 is an out-of-bounds write vulnerability resolved by improved bounds checking. Affected platforms include Apple operating systems: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; and visionOS 26.6. The issue could allow a remote atta...

CVE-2026-64739

CVE-2026-64739 describes an out-of-bounds write that was mitigated by improved bounds checking. Affected platforms include Apple operating systems: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6; and watchOS 26.6. The issue could le...

CVE-2026-64763

Apple CVE-2026-64763 concerns an out-of-bounds write that was addressed by removing the vulnerable code. It affects multiple Apple platforms and is fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Processing a...

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The planar bitmap decoder contains an out-of-bounds heap write vulnerability when processing RLE planar data. A remote attacker could exploit this by providing specially crafted RLE planar data, leading to an...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0264-1 Rating: important References: 1272460 Cross-References: CVE-2026-16804 CVE-2026-16805 CVE-2026-16806 CVE-2026-16807 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes four...

PT-2026-64987

Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format ETF binary to binary to term/1 to corrupt the BEAM heap pointer and crash the virtual machine. When decoding a LARGE TUPLE EXT term,...

CVE-2026-64440

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HTcapshandler HTcapshandler iterates pIE-length bytes and writes into HTcaps.u.HTcap, which is a fixed 26-byte array sizeof struct HTcapselement. Because pIE-length is a raw u8 from an...

CVE-2026-64402

In the Linux kernel, the following vulnerability has been resolved: coresight: ultrasoc-smb: Fix OOB write in smbsyncperfbuffer When the SMB sink is used as a perf AUX sink, smbupdatebuffer calls smbsyncperfbuffer to copy hardware trace data into the perf AUX ring buffer pages. It derives pgidx =...

CVE-2026-64440

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HTcapshandler HTcapshandler iterates pIE-length bytes and writes into HTcaps.u.HTcap, which is a fixed 26-byte array sizeof struct HTcapselement. Because pIE-length is a raw u8 from an...

EUVD-2026-48784

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HTcapshandler HTcapshandler iterates pIE-length bytes and writes into HTcaps.u.HTcap, which is a fixed 26-byte array sizeof struct HTcapselement. Because pIE-length is a raw u8 from an...

CVE-2026-64402

CVE-2026-64402 concerns the Linux kernel coresight ultrasoc-smb path: an OOB write in smb_sync_perf_buffer() can occur when the SMB sink is used as a perf AUX sink because the initial page index is derived before applying modulo normalization to the buffer size. The issue is fixed by normalizing ...