289248 matches found
CVE-2026-28938
A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint the user...
CVE-2026-14277
IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file...
CVE-2026-14276
IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action...
CVE-2026-12759
CVE-2026-12759 affects IBM Cloud Pak for Business Automation (specifically IBM Business Automation Workflow ), where an authenticated user can trigger uncontrolled resource consumption leading to a denial of service (CWE-400). The vulnerability is rated CVSS 6.5 (Medium) with network attack vecto...
EUVD-2026-78150
IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL command...
CVE-2026-14275 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL command...
CVE-2026-14277 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file...
CVE-2026-14277 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file...
CVE-2026-7884
IBM Cognos Analytics (versions 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2) is vulnerable to a stored cross-site scripting (CWE-79) in the user account management panel. A non-privileged user can inject malicious JavaScript into their given name and surname fields; when an administra...
CVE-2026-7884 IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their given name and surname to include malicious JavaScript code. When an administrator later accesses the user account management panel and views that user's permissions, the...
EUVD-2026-78138
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their given name and surname to include malicious JavaScript code. When an administrator later accesses the user account management panel and views that user's permissions, the...
CVE-2026-43741
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data...
CVE-2026-43741
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data...
EUVD-2026-78132
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data...
CVE-2026-43741
A logic issue in macOS (specifically affecting Golden Gate 27 , Sequoia 15.8 , and Tahoe 26.7 ) was identified involving improper state management . This vulnerability could allow an application to gain unauthorized access to protected user data . The issue has been addressed in the mentioned ver...
CVE-2026-28937
This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data...
CVE-2026-43690
A race condition exists in macOS that can allow a local user to read kernel memory . This vulnerability was addressed by implementing improved locking and is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . Exploitation details and specific in-the-wild evidence are not ...
CVE-2026-43690
A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be able to read kernel memory...