EUVD-2026-5924

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2025-43417

A path handling issue was addressed with improved logic. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access user-sensitive data...

CVE-2026-20630

A permissions issue in macOS allows an application to access protected user data. The vulnerability is specifically associated with the LaunchServices component and was addressed by implementing additional restrictions. This flaw affects macOS Sequoia 15.7.4 , macOS Sonoma 14.8.4 , and macOS Taho...

CVE-2026-20647

This issue was addressed with improved data protection. This issue is fixed in macOS Tahoe 26.3. An app may be able to access sensitive user data...

CVE-2026-20647

This issue was addressed with improved data protection. This issue is fixed in macOS Tahoe 26.3. An app may be able to access sensitive user data...

CVE-2026-20647

The Apple macOS Tahoe operating system is vulnerable to an information disclosure flaw. Due to insufficient data protection mechanisms, an application may be able to access sensitive user data . This issue has been addressed with improved data protection and is fixed in macOS Tahoe 26.3 . Users a...

CVE-2026-20647

This issue was addressed with improved data protection. This issue is fixed in macOS Tahoe 26.3. An app may be able to access sensitive user data...

CVE-2024-50618

A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CIPAce before 9.17 allows attackers to bypass a protection mechanism. When the system is configured to allow login with internal accounts, an attacker can possibly obtain full authentication if the...

CVE-2026-21510

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-2360 Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom operator in the public schema and place malicious code in that operator. This operator will later be executed with superuser privileges when the extension is created. The risk is...

CVE-2026-25812

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application enables credentialed CORS requests but does not implement any CSRF protection mechanism...

[SECURITY] Fedora 42 Update: rust-speakersafetyd-1.0.2-6.fc42

Speaker protection daemon for embedded Linux systems...

PT-2026-7778

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.3 Description An application may be capable of accessing sensitive user data due to insufficient data protection mechanisms. Recommendations Update to macOS Tahoe 26.3...

MSHTML Bypass Security

The vulnerability of the MSHTML component in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass security functions remotely...

KWebVision SCADA Unauthorized Access

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system is related to insufficient protection of registration data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

Proxmox Mail Gateway Security Data Compromise

The vulnerability of Proxmox Mail Gateway, a security tool for email protection, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality and integrity of the protected information...

Kill It with FIRE: On Leveraging Latent Space Directions for Runtime Backdoor Mitigation in Deep Neural Networks

Machine learning models are increasingly present in our everyday lives; as a result, they become targets of adversarial attackers seeking to manipulate the systems we interact with. A well-known vulnerability is a backdoor introduced into a neural network by poisoned training data or a malicious...

CVE-2024-50618

A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CIPAce before 9.17 allows attackers to bypass a protection mechanism. When the system is configured to allow login with internal accounts, an attacker can possibly obtain full authentication if the...

GitLab Enterprise Edition (EE) and GitLab Community Edition (CE) code-related vulnerabilities

GitLab Enterprise Edition EE and GitLab Community Edition CE are products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. There were code vulnerabilities in versions prior to 18.6.6 of GitLab...

Shell command bypass Windows

The vulnerability of the Shell command shell in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...