Apple iOS security vulnerabilities

Security vulnerabilities exist in Apple iOS versions prior to 26.7 and 27.2, Apple iPadOS versions prior to 26.7 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe versions prior to 26.7.2, Apple tvOS versions prior to 27.2, a...

WebCodecs Component Protected Information Access

The WebCodecs component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper protection against attacks via external physical channels. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information by using a specially...

Google Chrome Microsoft Edge CORS

The CORS component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Geometry component of Google

The Geometry component vulnerability in Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as cause a...

Isolated web component of

The vulnerability in the Isolated web browser components of Google Chrome and Microsoft Edge is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information, as well as cause a denial of service by using a specially...

DataTransfer Component Protected Information Access

The vulnerability in the DataTransfer component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Geometry component of Google

The Geometry component vulnerability in Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as cause a...

Google Chrome Microsoft Edge UI Component DoS

The UI component vulnerability in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as cause a denial-of-service condition via a...

Tint Component Protected Information Access

The Tint component vulnerability in Google Chrome and Microsoft Edge web browsers is related to reading protected information beyond its permitted buffer boundaries. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML...

Sources Component Protected Information Access

The vulnerability in the Sources component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Paint Component Protected Information Access

The vulnerability in the Paint component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

WordPress Bopo authorization issue vulnerability

WordPress Bopo versions 1.2.3 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

PT-2026-123362

boneIO Black does not limit authentication attempts on its web interface POST /api/login or SSH service, and does not enforce password complexity. An unauthenticated remote attacker can make unlimited brute-force login attempts, potentially compromising user accounts and gaining unauthorized acce...

WordPress Customer Coupons for WooCommerce authorization issue vulnerability

WordPress Customer Coupons for WooCommerce versions 1.3.14 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control security levels...

PT-2026-123154

A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb platform/core/openbb core/app/model/api settings.py of the component Local API Server. This manipulation causes improper access controls. Remote exploitation of the attack is possible. Th...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple tvOS versions prior to 27.2. This vulnerability stems from inadequate validation mechanisms and may allow applications to access...

Meow Apps AI Engine authorization issue vulnerability

Meow Apps AI Engine versions 3.8.6 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control security levels...

WordPress DEPART authorization issue vulnerability

WordPress DEPART versions 1.0.10 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, enabling exploitation of improperly configured access control levels...

Apple MacOS: CVE-2026-112647: OS X update for iCloud

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27, and Apple iPadOS versions prior to 27. This vulnerability stems from insufficient permission checks and may allow applications to access sensitive user dat...