Paint Component Protected Information Access

The vulnerability in the Paint component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

PT-2026-125119

An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The accessible resources do not expose credentials or provide...

Bukwild Decoy permission and access control issue vulnerability

Bukwild Decoy versions 5.11.1 and earlier contain a vulnerability related to permission escalation and access control. This issue stems from improper handling of the ‘role’ parameter in the Policy.php file, resulting in inadequate permission management and potential remote exploitation...

PT-2026-125026

Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Coupons for WooCommerce: from n/a through 1.3.14...

PT-2026-125305

This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access sensitive user data...

WordPress Discussion Board authorization issue vulnerability

WordPress Discussion Board versions 2.6.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from access control issues and insufficient sandbox restrictions, potentially allowing...

Syncplify Server path traversal vulnerability

Versions prior to Syncplify Server 8.8.0 contain a path traversal vulnerability. This vulnerability stems from an access control bypass, allowing authenticated SFTP users to exploit case-insensitive file system path resolution and the 8.3 short filename feature to bypass per-path permissions. As ...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2 and Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2 and Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Taho...

WordPress Geo Mashup authorization issue vulnerability

WordPress Geo Mashup versions 1.13.22 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks and may lead to exploitation of improperly configured access control levels...

WordPress LearnPress authorization issue vulnerability

WordPress LearnPress versions 4.4.11 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control levels...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2 and Apple iPadOS versions prior to 27.2. This vulnerability stems from an authorization issue and may allow remote attackers to access sensitive user data...

Apple MacOS: CVE-2026-112628: OS X update for Spotlight

This issue was addressed with improved data access restriction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data...

PT-2026-125333

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from permission issues and may allow applications to access sensitive user data...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from an access control issue and may allow applications to bypass sandbox restrictions...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27, and Apple iPadOS versions prior to 27. This vulnerability stems from insufficient permission checks and may allow applications to access sensitive user dat...

Apple iOS security vulnerabilities

Security vulnerabilities exist in Apple iOS versions prior to 26.7 and 27.2, Apple iPadOS versions prior to 26.7 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe versions prior to 26.7.2, Apple tvOS versions prior to 27.2, a...

WebCodecs Component Protected Information Access

The WebCodecs component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper protection against attacks via external physical channels. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information by using a specially...

Google Chrome Microsoft Edge CORS

The CORS component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...