717673 matches found
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.10. It arises because btintelpciepreparetx uses tfdindex to access the TFD and data buffer array before incrementing the index based on modulo operation with txq-count. Boundary checks fail to reject out-of-bounds indices equal to txq-coun...
Apple iOS security vulnerabilities
Security vulnerabilities exist in Apple iOS versions prior to 26.7.2 and prior to 27.2, Apple iPadOS versions prior to 26.7.2 and prior to 27.2, Apple macOS versions prior to 27.2 for Golden Gate, prior to 15.8.2 for Sequoia, prior to 26.7.2 for Tahoe, prior to 27.2 for tvOS, prior to 27.2 for...
PT-2026-125026
Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Coupons for WooCommerce: from n/a through 1.3.14...
PT-2026-125305
This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access sensitive user data...
PT-2026-123469
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...
WebCodecs Component Protected Information Access
The WebCodecs component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper protection against attacks via external physical channels. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information by using a specially...
Geometry component of Google
The Geometry component vulnerability in Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as cause a...
Paint Component Protected Information Access
The vulnerability in the Paint component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
Sources Component Protected Information Access
The vulnerability in the Sources component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
PT-2026-125333
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data...
Apple iOS security vulnerabilities
A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple tvOS versions prior to 27.2. This vulnerability stems from inadequate validation mechanisms and may allow applications to access...
Apple macOS security vulnerabilities
A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from access control issues and insufficient sandbox restrictions, potentially allowing...
Billabear authorization issue vulnerability
Billabear versions 2025.01.03 and earlier contain an authorization issue vulnerability. This vulnerability stems from the absence of authentication in the processInstall function within the file src/BillaBear/Controller/InstallController.php in the Installation Handler component, potentially...
Apple iOS security vulnerabilities
A security vulnerability exists in Apple iOS versions prior to 26.7.2 and Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2 and Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Taho...
Google Chrome Microsoft Edge CORS
The CORS component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
Geometry component of Google
The Geometry component vulnerability in Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as cause a...
Isolated web component of
The vulnerability in the Isolated web browser components of Google Chrome and Microsoft Edge is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information, as well as cause a denial of service by using a specially...
Google Chrome Microsoft Edge UI Component DoS
The UI component vulnerability in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as cause a denial-of-service condition via a...
Tint Component Protected Information Access
The Tint component vulnerability in Google Chrome and Microsoft Edge web browsers is related to reading protected information beyond its permitted buffer boundaries. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML...
DataTransfer Component Protected Information Access
The vulnerability in the DataTransfer component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...