ROS-20261026-73-0081

The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

PT-2026-125362

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7.2 iPadOS versions prior to 26.7.2 iOS versions prior to 27.2 iPadOS versions prior to 27.2 macOS Golden Gate versions prior to 27.2 macOS Sequoia versions prior to 15.8.2 macOS Tahoe versions prior to 26.7.2 tvOS...

DeviceBoundSessionCredentials Google Chrome Microsoft Edge Access Information

The vulnerability in the DeviceBoundSessionCredentials component of Google Chrome and Microsoft Edge is related to cross-site request forgery. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Google Chrome Microsoft Edge Protected Information Access

The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted PDF file...

DataTransfer Component Protected Information Access

The vulnerability in the DataTransfer component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of the state of shared resources. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted...

DataTransfer Component Protected Information Access

The vulnerability in the DataTransfer component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

JetBrains YouTrack Authorization Bypass

The vulnerability in JetBrains YouTrack’s project and task management software is related to an improper authorization process based on a list of permitted senders. Exploitation of this vulnerability could allow a remote attacker to bypass existing security mechanisms and gain unauthorized access...

Google Chrome Microsoft Edge Protected Information Access

The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

PT-2026-125459

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2. A malicious app may be able to access the camera without user...

Lobster DATA Lobster_pro permission and access control issue vulnerability

Versions 4.12.12-LTS and earlier of Lobster DATA Lobsterpro contain a permission and access control vulnerability. This vulnerability stems from improper permission checks and may allow attackers to interact with endpoints requiring administrative privileges...

Safe Browsing Protected Information Access

The vulnerability in the Safe Browsing component of Google Chrome and Microsoft Edge is related to insufficient validation of input protected information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a malicious file...

Wolfvision Cynap authorization issue vulnerability

The Wolfvision Cynap has an authorization issue vulnerability. This vulnerability stems from access control problems in the web server configuration. Certain resources intended for local use on devices can be accessed remotely by attackers who lack authentication but possess a web interface; this...

PT-2026-123241

Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0...

PT-2026-123254

Missing Authorization vulnerability in WP Smart Widgets Better Post & Filter Widgets for Elementor better-post-filter-widgets-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Post & Filter Widgets for Elementor: from n/a through 1.9.1...

PT-2026-123152

A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to improper access controls. The attack may be initiated remotely. The vendor was contacted early about th...

UBUNTU-CVE-2026-55888

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host limited to files the user has access to. The FileChooser.SaveFiles method takes...

PT-2026-125276

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, visionOS 27.2. An app may be able to access sensitive user data...

ROS-20261026-73-0006

The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, macOS Sequoia versions prior to 15.8.2, and macOS Tahoe versions prior to 26.7.2. This vulnerability stems from insufficient permission checks and may allow applications to access sensitive user data...

WordPress WC Shop Sync authorization issue vulnerability

WordPress WC Shop Sync versions 4.7.5 and earlier contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks and improperly configured access control security levels, potentially allowing attackers to exploit misconfigured access controls...