44369 matches found
CVE-2026-66372
creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:38+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01...
CVE-2026-66887
creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:37+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01 2026-09-15 20:02:34+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mvlg623ip52o 2026-09-16 07:40:06+00:00| seen|...
CVE-2026-66890
creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:31+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01 2026-09-15 20:02:34+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mvlg623ip52o 2026-09-15 22:01:29+00:00| seen|...
PT-2026-92442
Name of the Vulnerable Software and Affected Versions Intrusion detection systems affected versions not specified Description A limited buffer overflow exists in the network security monitoring component. An unauthenticated remote attacker could exploit this flaw to cause a denial-of-service or...
CVE-2026-86884
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able to access sensitive user data...
CVE-2026-84632
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption...
CVE-2026-84620
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory...
CVE-2026-65353
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user data...
CVE-2026-84617
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27. An app may be able to access sensitive user data...
CVE-2026-65402
A use after free vulnerability exists in various Apple products, including iOS , iPadOS , macOS , tvOS , visionOS , and watchOS . The root cause is attributed to issues in memory management, which could allow an application to cause an unexpected system termination . The issue is addressed in the...
CVE-2026-84546
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memo...
CVE-2026-84491
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data...
Astra Linux – Vulnerability in Heimdal, KRB5
PAC parsing in MIT Kerberos 5 also known as krb5 before versions 1.19.4 and 1.20.x before version 1.20.1 contains integer overflows that may lead to remote code execution in the KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms. This results in a heap-based buffer overflow...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
The Cross-Privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recently introduced FineIBT, and to leak arbitrary Linux kernel memory on Intel systems...
Astra Linux – Vulnerability in Tomcat9
The “Time-of-check Time-of-use” TOCTOU race condition vulnerability during JSP compilation in Apache Tomcat allows for a race condition on case-insensitive file systems when the default servlet is enabled for writing not in the default configuration. This issue affects Apache Tomcat versions from...
Astra Linux – Vulnerability in sysstat
Sysstat is a set of system performance tools for the Linux operating system. On 32-bit systems, in versions 9.1.16 and later, but before version 12.7.1, the allocatestructures function contained a sizet overflow in the sacommon.c file. The allocatestructures function insufficiently checked the...
Astra Linux – Vulnerability in gdk-pixbuf
GNOME GdkPixbuf also known as GDK-PixBuf prior to version 2.42.8 allowed a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated in the io-gif-animation.c file’s compositeframe function. This overflow was controllable and could be exploited for code executio...
Astra Linux – Vulnerability in Samba
Windows Kerberos Elevation of Privilege Vulnerability...
Astra Linux – Vulnerability in Python 3.7, Python 2.7, Pypy
A vulnerability was discovered in Python before version 3.8.18, 3.9.x before version 3.9.18, 3.10.x before version 3.10.13, and 3.11.x before version 3.11.5. This vulnerability primarily affects servers such as HTTP servers that use TLS client authentication. When a TLS server-side socket is...