28825 matches found
CVE-2026-64742
CVE-2026-64742 is tied to Apple platforms where an app could access sensitive user data due to insecure network transmission; the issue is addressed by mandating HTTPS. Apple fixed it in iOS/iPadOS/tvOS/visionOS/watchOS 26.6. The combined sources confirm the vulnerability involved sending informa...
CVE-2026-43759
An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data...
EUVD-2026-49627
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to access sensitive user data...
CVE-2026-64755
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to access sensitive user data...
CVE-2026-64755
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to access sensitive user data...
CVE-2026-43758
CVE-2026-43758 affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6 and watchOS 26.6. Description: an authorization issue was addressed via improved state management, reducing the risk that an app could access sensitive user data. Root cause is stated as state-management-related, w...
CVE-2026-43758
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data...
EUVD-2026-49626
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data...
EUVD-2026-49624
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data...
CVE-2026-64743
CVE-2026-64743 is an authorization issue addressed by Apple with improved state management. The NVD entry specifies that the flaw allows an app to access sensitive user data and is fixed in iOS 26.6 / iPadOS 26.6 / macOS Tahoe 26.6 / tvOS 26.6 / visionOS 26.6 / watchOS 26.6. Core metrics show CVS...
CVE-2026-43774
The CVE-2026-43774 entry describes an out-of-bounds read that could let an app access sensitive user data. Apple fixed this by improving bounds checking in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The available sources confirm the affected platforms and the remediation ver...
EUVD-2026-49620
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data...
EUVD-2026-49616
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data...
WordPress PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer plugin <= 1.1.0 - Missing Authorization to Unauthenticated Sensitive PDF Disclosure vulnerability
Missing Authorization to Unauthenticated Sensitive PDF Disclosure vulnerability discovered by sl4x0 in WordPress Plugin PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer versions = 1.1.0...
CVE-2026-66438
Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor = 2.8.0 versions...
CVE-2026-65564
Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress = 2.97.6 versions...
CVE-2026-59548
Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking = 1.0.0 versions...
CVE-2025-59178 Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability
Ericsson Packet Core Controller PCC versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system...
CVE-2025-59178
Ericsson Packet Core Controller PCC versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system...