Paint Component Protected Information Access

The vulnerability in the Paint component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

WordPress Bopo authorization issue vulnerability

WordPress Bopo versions 1.2.3 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

PT-2026-123362

boneIO Black does not limit authentication attempts on its web interface POST /api/login or SSH service, and does not enforce password complexity. An unauthenticated remote attacker can make unlimited brute-force login attempts, potentially compromising user accounts and gaining unauthorized acce...

WordPress Customer Coupons for WooCommerce authorization issue vulnerability

WordPress Customer Coupons for WooCommerce versions 1.3.14 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control security levels...

PT-2026-123154

A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb platform/core/openbb core/app/model/api settings.py of the component Local API Server. This manipulation causes improper access controls. Remote exploitation of the attack is possible. Th...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple tvOS versions prior to 27.2. This vulnerability stems from inadequate validation mechanisms and may allow applications to access...

Meow Apps AI Engine authorization issue vulnerability

Meow Apps AI Engine versions 3.8.6 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control security levels...

WordPress DEPART authorization issue vulnerability

WordPress DEPART versions 1.0.10 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, enabling exploitation of improperly configured access control levels...

Apple MacOS: CVE-2026-112647: OS X update for iCloud

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2. This vulnerability stems from improper handling of sensitive data movement, potentially allowing applications to access sensitive user data...

Apple MacOS: CVE-2026-112628: OS X update for Spotlight

This issue was addressed with improved data access restriction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data...

Daniel Gatis Rembg path traversal vulnerability

Versions of Daniel Gatis Rembg prior to 2.0.82 contain a path traversal vulnerability. This vulnerability arises because the publicly accessible /api/remove endpoint passes an attacker-controlled extras.sammodel parameter to both the SAM filename and the GitHub download URL without validating its...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.10. It arises because btintelpciepreparetx uses tfdindex to access the TFD and data buffer array before incrementing the index based on modulo operation with txq-count. Boundary checks fail to reject out-of-bounds indices equal to txq-coun...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from permission issues and may allow applications to access sensitive user data...

PT-2026-125326

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data...

RHEL 9 : webkit2gtk3 (RHSA-2026:89821)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89821 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: skia:...

PT-2026-125026

Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Coupons for WooCommerce: from n/a through 1.3.14...

PT-2026-125305

This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access sensitive user data...

PT-2026-123469

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

WordPress Discussion Board authorization issue vulnerability

WordPress Discussion Board versions 2.6.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...