CVE-2026-64740

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its...

EUVD-2026-49454

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox...

CVE-2026-64740

A parsing issue in the handling of directory paths allows a malicious application to potentially break out of its sandbox . This vulnerability was addressed by implementing improved path validation . Affected products and versions include iOS 18.7.10 , iPadOS 18.7.10 , iOS 26.6 , iPadOS 26.6 , ma...

CVE-2026-64731

A path handling issue in macOS was addressed with improved validation. If left unpatched, a malicious app may be able to break out of its sandbox . This vulnerability is fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6 . No specific exploit details or links are provided in the documents.

CVE-2026-43749

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges...

CVE-2026-43749

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges...

CVE-2026-43749

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges...

CVE-2026-43749

A parsing issue in the handling of directory paths was identified in macOS, where insufficient path validation could allow an application to gain root privileges . This vulnerability has been addressed with improved path validation. The issue is fixed in macOS Sequoia 15.7.8 , macOS Sonoma 14.8.8...

EUVD-2026-49569

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location...

DEBIAN-CVE-2026-59251

Allocation of resources without limits in Erlang/OTP publickey certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in publickey:pkixpathvalidation/3...

CVE-2026-59251 Denial of service via exponential certificate policy tree growth in path validation

Allocation of resources without limits in Erlang/OTP publickey certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in publickey:pkixpathvalidation/3...

CVE-2026-59251

Allocation of resources without limits in Erlang/OTP publickey certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in publickey:pkixpathvalidation/3...

CVE-2026-59251

Allocation of resources without limits in Erlang/OTP publickey certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in publickey:pkixpathvalidation/3...

EEF-CVE-2026-59251 Denial of service via exponential certificate policy tree growth in path validation

Summary Allocation of resources without limits in Erlang/OTP public\key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in...

CVE-2026-65878

Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder 6.7.1- Improper path validation and ACL checks lead to a file deletion vector in the media manager...

CVE-2026-65878

Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder 6.7.1- Improper path validation and ACL checks lead to a file deletion vector in the media manager...

EUVD-2026-49196

Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder 6.7.1- Improper path validation and ACL checks lead to a file deletion vector in the media manager...

CVE-2026-65878 Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1

Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder 6.7.1- Improper path validation and ACL checks lead to a file deletion vector in the media manager...

CVE-2026-65878

CVE-2026-65878 concerns the Joomla Extension from joomshaper.com, specifically SP Page Builder versions earlier than 6.7.1. The issue arises from improper path validation and ACL checks, creating a vector for authenticated users to perform arbitrary file deletion via the media manager. This is an...

PT-2026-65157

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A parsing issue in the handling of directory paths exists where improved path validation is required. This flaw could...