717414 matches found
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.10. It arises because btintelpciepreparetx uses tfdindex to access the TFD and data buffer array before incrementing the index based on modulo operation with txq-count. Boundary checks fail to reject out-of-bounds indices equal to txq-coun...
Apple macOS security vulnerabilities
A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from permission issues and may allow applications to access sensitive user data...
PT-2026-125326
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data...
RHEL 9 : webkit2gtk3 (RHSA-2026:89821)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89821 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: skia:...
Apple macOS security vulnerabilities
A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2. This vulnerability stems from improper handling of sensitive data movement, potentially allowing applications to access sensitive user data...
Apple iOS security vulnerabilities
A security vulnerability exists in Apple iOS versions prior to 26.7.2 and Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2 and Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Taho...
Google Chrome Microsoft Edge CORS
The CORS component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
WordPress Geo Mashup authorization issue vulnerability
WordPress Geo Mashup versions 1.13.22 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks and may lead to exploitation of improperly configured access control levels...
WordPress LearnPress authorization issue vulnerability
WordPress LearnPress versions 4.4.11 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control levels...
Apple iOS security vulnerabilities
A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27, and Apple iPadOS versions prior to 27. This vulnerability stems from insufficient permission checks and may allow applications to access sensitive user dat...
Apple iOS security vulnerabilities
A security vulnerability exists in Apple iOS versions prior to 27.2 and Apple iPadOS versions prior to 27.2. This vulnerability stems from an authorization issue and may allow remote attackers to access sensitive user data...
HeyCyan permission and access control issues vulnerability
The HeyCyan 1.0.103 version contains a vulnerability related to permission and access control issues. This flaw stems from improper access control in the FileProvider component, potentially allowing remote attackers to gain unauthorized access...
EUVD-2026-110069
The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...
Apple MacOS: CVE-2026-112628: OS X update for Spotlight
This issue was addressed with improved data access restriction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data...
PT-2026-123381
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.113 Linux kernel versions prior to 6.18.57 Description An out-of-bounds access issue exists in the btintel pcie Bluetooth driver. The btintel pcie prepare tx function uses the tfd index variable to access th...
ROS-20261026-73-0071
The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Wolfvision Cynap authorization issue vulnerability
The Wolfvision Cynap has an authorization issue vulnerability. This vulnerability stems from access control problems in the web server configuration. Certain resources intended for local use on devices can be accessed remotely by attackers who lack authentication but possess a web interface; this...
PT-2026-123279
Name of the Vulnerable Software and Affected Versions Mendix SAML Mendix 10 compatible versions prior to 4.2.4 Mendix SAML Mendix 11 compatible versions prior to 4.2.4 Mendix SAML Mendix 9 compatible versions prior to 3.6.29 Description The module fails to properly protect against SAML assertion...
PT-2026-123347
TTLock Android application before v9.8.260718 and associated smart-lock firmware contain a hardcoded static AES key vulnerability that allows an attacker within Bluetooth range to decrypt the per-pairing session key transmitted during BLE pairing. Attackers can observe the pairing exchange, recov...