CLEANSTART-2024-VF60136 type confusion issue was addressed with improved state handling

Security vulnerability affects the webkit2gtk package. A type confusion issue was addressed with improved state handling...

CLEANSTART-2024-UR49871 type confusion issue was addressed with improved state handling

Security vulnerability affects the webkit2gtk package. A type confusion issue was addressed with improved state handling...

SUSE CVE-2026-98901

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do not skip valid lease states containing WRITECACHING when breaking level-II/read leases for writes and truncates. Handle lease break acknowledgments according to the SMB2 rule that...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from improper handling of input states, potentially allowing applications to monitor key presse...

CVE-2026-98901 ksmbd: fix lease break and ack state handling

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do not skip valid lease states containing WRITECACHING when breaking level-II/read leases for writes and truncates. Handle lease break acknowledgments according to the SMB2 rule that...

CVE-2026-98901

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do not skip valid lease states containing WRITECACHING when breaking level-II/read leases for writes and truncates. Handle lease break acknowledgments according to the SMB2 rule that...

CVE-2026-98901

The Linux kernel 's ksmbd component contained a flaw in lease break and ack state handling . Specifically, the system failed to preserve valid lease states containing WRITE_CACHING when breaking level-II/read leases for writes and truncates. Additionally, lease break acknowledgments did not consi...

CVE-2026-98901 ksmbd: fix lease break and ack state handling

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do not skip valid lease states containing WRITECACHING when breaking level-II/read leases for writes and truncates. Handle lease break acknowledgments according to the SMB2 rule that...

PHP 8.5.11 Remote Code Execution

PHP versions prior to 8.5.12, 8.4.27, 8.3.36, and 8.2.35 contain remote code execution vulnerabilities. This script performs behavioral checks for affected request parsing and session state handling...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.158, 6.12.111, and 6.18.53. This vulnerability stems from improper handling of states by ksmbd during interruption level-II and when processing lease termination confirmations. As a result, it may skip over valid lease states...

PHP 5.6.40 Security Patch

PHP version 5.6.40 contains vulnerabilities in multipart request parsing and stale request state handling; this patch backports fixes for both issues...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net/rds: No shortcut out of RDSCONNERROR RDS connections carry a state “rdsconnpath::cpstate” and transition between states; these transitions are conditional upon the expected state “rdsconnpathtransition”. There is one exceptio...

Apple IOKit DriverKit Race Condition

Apple IOKit contains a race condition that may allow an app to cause unexpected system termination or write kernel memory. The supplied analysis includes a sanitizer-checked proof of concept model of the reported DriverKit RPC state-handling flaw...

CVE-2026-84630

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

CVE-2026-84507

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt...

CVE-2026-84492

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

CVE-2026-65401

A race condition was addressed with improved state handling. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

CVE-2026-65360

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

CVE-2026-65358

A race condition was addressed with improved state handling. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

CVE-2026-64717

A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel...