PT-2026-91608

Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description A race condition occurs due to insufficient validation, which may allow an application to cause unexpected system...

PT-2026-91644

Found that 3 of my bug submissions had been rolled up into CVE-2026-84589. I’ll aim to get a blog released when they’ve formally been resolved by Apple ProdSec. https://t.co/6wjR6Li2UK...

PT-2026-91562

Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 tvOS versions prior to 27 visionOS versions prior to 27 watchOS versions prior to 27 Description A race condition occurs due to insufficient validation...

PT-2026-91694

Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 tvOS versions prior to 27 visionOS versions prior to 27 watchOS versions prior to 27 Description A permissions issue exists where an application may be able to read the device name...

PT-2026-91520

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description A...

CVE-2026-49882

In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74022

In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...

CVE-2026-58820

A memory safety issue caused by an integer overflow exists in multiple locations within the affected software. This vulnerability could allow for local escalation of privilege without requiring additional execution privileges. While the root cause is identified as an integer overflow, the specifi...

EUVD-2026-74013

In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45525

CVE-2026-45525 is an information disclosure vulnerability (CWE-200) within the Media Provider component of Project Mainline on Android. The flaw is caused by a logic error leading to improper data sanitization, which allows for the leaking of internal database state records . This vulnerability a...

CVE-2026-45519

The Media Provider component in Android is vulnerable to an incorrect permission assignment (CWE-275 ) due to a confused deputy flaw in the screenArgsForPermissionCheckIfAny function at multiple locations. This vulnerability allows for local database boundary bypasses , potentially leading to loc...

CVE-2026-28604

CVE-2026-28604 identifies a use-after-free vulnerability caused by a race condition within the Android Debug Bridge Daemon (adbd) . This flaw allows a local attacker to elevate their context to the shell user. The vulnerability impacts Android 13, 14, 15, and 16 . Exploitation does not require ad...

Android Security Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.

This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2026-09-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Source code patches...

CVE-2026-75784

creationtimestamp| type| source ---|---|--- 2026-08-18 16:11:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtem6rsfaf2e 2026-08-18 18:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtesbcd3x425...

CVE-2026-64760

This vulnerability involves an information leakage in various Apple operating systems, including iOS , iPadOS , macOS Golden Gate 27 , tvOS 27 , visionOS 27 , and watchOS 27 . The root cause is an issue where an application may be able to leak sensitive kernel state due to insufficient validation...

CVE-2026-16974

creationtimestamp| type| source ---|---|--- 2026-08-13 04:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mswrvdxxxy24...

MAL-2026-12412 Malicious code in pfp-forms-independent-sme-glossary-anchor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96f28993eb59bb78a357534cf64aac001732fc4951ccb33f8eca2a3ce615f3c On require of the package, index.js loads compat.js which reconstructs mirror hostnames via string-splitting joins oob-worker.cf102-baf.workers.dev,...

GHSA-X3HF-7CJ6-3R4M Flowise RCE via SQLite Record Manager Node

============================================================================= Security Advisory elttam Topic: Flowise RCE via SQLite Record Manager Node Module: FlowiseAI/Flowise Disclosed: 24-Apr-2026 Credits: Alex Brown Affects: FlowiseAI/Flowise 3.1.2 I. Background Flowise AI is an open-source...

Flowise RCE via TypeORM DataSource

============================================================================= Security Advisory elttam Topic: Flowise RCE via TypeORM DataSource Module: FlowiseAI/Flowise Disclosed: 15-Apr-2026 Credits: Alex Brown Affects: FlowiseAI/Flowise 3.1.2 I. Background Flowise AI is an open-source, low-co...

GHSA-G32J-MMXR-GFQ5 Flowise RCE via TypeORM DataSource

============================================================================= Security Advisory elttam Topic: Flowise RCE via TypeORM DataSource Module: FlowiseAI/Flowise Disclosed: 15-Apr-2026 Credits: Alex Brown Affects: FlowiseAI/Flowise 3.1.2 I. Background Flowise AI is an open-source, low-co...