CVE-2026-3472

creationtimestamp| type| source ---|---|--- 2026-06-29 21:43:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhgs6dm723 2026-06-29 21:43:35+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mphhguw4wr26...

CVE-2026-13763

This CVE affects AWS Application Load Balancer (ALB) with AWS WAF enabled, where inconsistent interpretation of HTTP/2 requests can allow bypass of WAF body inspection when the request body is fragmented across frames, leading to partial inspection. Affected component: HTTP/2 ALB target groups; r...

CVE-2026-13763 HTTP/2 Stream Parser Confusion Body-Inspection Bypass in AWS Application Load Balancer with AWS WAF

Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only a partial body is inspected. This iss...

CVE-2026-13763 HTTP/2 Stream Parser Confusion Body-Inspection Bypass in AWS Application Load Balancer with AWS WAF

Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only a partial body is inspected. This iss...

EUVD-2026-40221

Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only a partial body is inspected. This iss...

CVE-2026-13763

Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only a partial body is inspected. This iss...

CVE-2026-13762

Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only a partial body is inspected. This issue was...

CVE-2026-13762

CVE-2026-13762 involves an vulnerability in Amazon CloudFront when AWS WAF is enabled. The issue arises from an inconsistent interpretation of HTTP/2 requests, which can allow remote actors to bypass AWS WAF managed body‑inspection by fragmenting the request body across frames so that only a part...

CVE-2026-43707

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-43724

The vulnerability in CVE-2026-43724 was caused by inadequate input sanitization. An application could exploit this flaw to trigger an unexpected system termination or perform a kernel memory write . This issue is addressed in several Apple operating systems, including iOS 18.7.10 , iPadOS 18.7.10...

EUVD-2026-40200

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-43745

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an...

EUVD-2026-40190

The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. An app may be able to leak sensitive kernel state...

CVE-2026-57956

creationtimestamp| type| source ---|---|--- 2026-06-29 19:13:18+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mph725ba3a2w 2026-06-29 19:13:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph725cpjm2n 2026-06-29 21:54:04+00:00| seen|...

CVE-2026-57943

creationtimestamp| type| source ---|---|--- 2026-06-29 18:50:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5qivxkj23 2026-06-29 18:50:10+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mph5qrtque2t 2026-06-29 22:17:23+00:00| seen|...

CVE-2026-57945

creationtimestamp| type| source ---|---|--- 2026-06-29 18:49:04+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mph5osmcfv2g 2026-06-29 18:49:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5ozv2oa2d 2026-06-29 21:14:48+00:00| seen|...

CVE-2026-57942

creationtimestamp| type| source ---|---|--- 2026-06-29 18:47:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5lxfsnf2o 2026-06-29 18:47:29+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mph5ly2lto2k...

CVE-2026-13751

creationtimestamp| type| source ---|---|--- 2026-06-29 17:54:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2nxm6hf2t 2026-06-29 18:43:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5feg6v52o 2026-06-29 20:15:46+00:00| seen|...

CVE-2026-13752

creationtimestamp| type| source ---|---|--- 2026-06-29 17:53:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2ktndmm2d 2026-06-29 18:34:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph4tvl67r2d 2026-06-29 20:06:28+00:00| seen|...

CVE-2026-13591

creationtimestamp| type| source ---|---|--- 2026-06-29 17:50:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2geoxdw2t 2026-06-29 18:48:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5ngctor23 2026-06-29 20:35:47+00:00| seen|...