PT-2026-125403

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data...

PT-2026-125428

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27. An app may be able to access sensitive user data...

PT-2026-123428

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

Then There Is Prompt Injection, a Malicious Email, ...: The Wild Wide West of OpenClaw Agentic System Security

AI-powered personal assistant frameworks such as OpenClaw combine LLM reasoning, persistent memory, tool invocation, local execution, and web-based workflows. These capabilities enable useful automation, but they also create security risks when untrusted inputs, model reasoning, tools, memory, an...

ROS-20261026-73-0161

The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

PT-2026-125452

This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An app may be able to access sensitive user data...

Apple MacOS: CVE-2026-113912: OS X update for CoreAudio

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted media file may lead to...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from improper access restrictions and may allow applications to read files outside the sandbox...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from an access control issue and may allow applications to bypass their sandboxes...

PT-2026-125146

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from vulnerable code that could allow applications to access sensitive user data...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple visionOS versions prior to 27.2. This vulnerability stems from authorization issues and improper state management, potentially allowi...

magepeopleteam Booking and Rental Manager authorization issue vulnerability

MagepeopleTeam Booking and Rental Manager versions 2.8.2 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, potentially allowing exploitation of improperly configured access control levels...

PT-2026-123284

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 18.7.11, Apple iPadOS versions prior to 18.7.11, Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior ...

DataTransfer Component Protected Information Access

The vulnerability in the DataTransfer component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

JetBrains YouTrack Authorization Bypass

The vulnerability in JetBrains YouTrack’s project and task management software is related to an improper authorization process based on a list of permitted senders. Exploitation of this vulnerability could allow a remote attacker to bypass existing security mechanisms and gain unauthorized access...

DeviceBoundSessionCredentials Google Chrome Microsoft Edge Access Information

The vulnerability in the DeviceBoundSessionCredentials component of Google Chrome and Microsoft Edge is related to cross-site request forgery. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Google Chrome Microsoft Edge Protected Information Access

The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted PDF file...

DataTransfer Component Protected Information Access

The vulnerability in the DataTransfer component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of the state of shared resources. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted...