PT-2026-65264

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox...

PT-2026-65158

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A buffer overflow occurs due to insufficient bounds checking. This flaw allows an application to execute arbitrary code...

PT-2026-65210

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.6 iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6 Description An access issue...

macOS 15.x < 15.7.8 Multiple Vulnerabilities (128071)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.7.8. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. An app may be able to...

PT-2026-65209

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.6 Description An access issue exists where an application may be able to access sensitive user data. This is addressed by implementing additional sandbox restrictions, which are security mechanisms that isolate...

PT-2026-65176

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A path traversal issue exists where an app may be able to break out of its sandbox. This occurs due to insufficient inp...

Exploit for Code Injection in Kidocode Crawl4Ai

CVE-2026-26216 — Crawl4AI unauthenticated RCE via hooks GHS...

Exploit for Improper Authorization in Microsoft

cve-id Donate Support the maintenance of this project wit...

Exploit for CVE-2026-16723

cve-id Donate Support the maintenance of this project wit...

Cross-site Scripting (XSS)

n8n is vulnerable to Cross-site Scripting XSS. The vulnerability is due to rendering HTML preview content in an iframe without the sandbox attribute and a sanitizer bypass, which allows an attacker with global member privileges to execute malicious scripts and perform authenticated actions using ...

Linux Distros Unpatched Vulnerability : CVE-2026-16424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially...

Linux Distros Unpatched Vulnerability : CVE-2026-16388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16388 Note that Nessus relies on the...

SUSE SLED15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:3221-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3221-1 advisory. This update for MozillaFirefox fixes the following issue: - Firefox Extended Support Release 140.13.0 ESR MFSA...

Linux Distros Unpatched Vulnerability : CVE-2026-15226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler snap-confine. The default seccomp securi...

Linux Distros Unpatched Vulnerability : CVE-2026-16416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network...

Linux Distros Unpatched Vulnerability : CVE-2026-16352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.1...

Linux Distros Unpatched Vulnerability : CVE-2026-16804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a...

Linux Distros Unpatched Vulnerability : CVE-2026-16356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.1...

EUVD-2026-48422

AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK installpackages...

CVE-2026-48035 Hulumi: AccountFoundation audit-delivery S3 bucket could be silently weakened

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, consumers using AccountFoundation could ship an AWS account whose CloudTrail / Config audit logs were deletable by any S3-delete-capable principal — while...