190282 matches found
CVE-2026-86957
Apple released security updates addressing an out-of-bounds read vulnerability. This issue is caused by insufficient bounds checking and could allow an attacker in wireless proximity to cause unexpected system termination . The vulnerability is fixed in iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS 27...
EUVD-2026-104732
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected...
CVE-2026-86957
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected...
CVE-2026-86874
The otool component within Xcode 27 (available for macOS Tahoe 26.6 and later) is affected by an out-of-bounds read vulnerability. The root cause is an input validation issue triggered by parsing a maliciously crafted binary. The practical consequence of this vulnerability is that it may lead to ...
EUVD-2026-104712
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination...
CVE-2026-86874
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination...
CVE-2026-86874
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination...
CVE-2026-77937 Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header
Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted userid HTTP header. Attackers can set userid to another tenant's ID, even with LETTASERVERSECURE enabled, to read and modify that user's agents,...
CVE-2026-77937 Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header
Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted userid HTTP header. Attackers can set userid to another tenant's ID, even with LETTASERVERSECURE enabled, to read and modify that user's agents,...
CVE-2026-77937
Letta versions through 0.16.8 are vulnerable to an authentication bypass flaw. The issue allows API callers to perform cross-tenant impersonation by providing a self-asserted user_id HTTP header. This vulnerability persists even when LETTA_SERVER_SECURE is enabled. Successful exploitation allows ...
CVE-2026-77937
Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted userid HTTP header. Attackers can set userid to another tenant's ID, even with LETTASERVERSECURE enabled, to read and modify that user's agents,...
CVE-2026-77937 Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header
Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted userid HTTP header. Attackers can set userid to another tenant's ID, even with LETTASERVERSECURE enabled, to read and modify that user's agents,...
CVE-2026-77935 Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, updatemeta,...
CVE-2026-77935 Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, updatemeta,...
CVE-2026-77935 Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, updatemeta,...
EUVD-2026-104691
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, updatemeta,...
CVE-2026-77935
Coze Studio versions through 0.5.1 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability within workflow.go . This flaw allows authenticated users to access workflows belonging to other spaces by providing a foreign workflowID . Specifically, attackers can pair their own spac...
CVE-2026-77935
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, updatemeta,...
CLEANSTART-2026-KD86605 SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read
Security vulnerability affects the tempo package. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...
CLEANSTART-2026-JO14647 CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/ru...
Security vulnerability affects the grafana-alloy package. The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/namespace Thanks to Prasanth...