PT-2026-91696

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...

PT-2026-91670

Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 tvOS versions prior to 27 visionOS versions prior to 27 watchOS versions prior to 27 Description An authorization issue exists due to improper state...

PT-2026-91677

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 macOS Golden Gate versions prior to 27 Description An out-of-bounds write issue occurs when processing a maliciously crafted image, which may lead to unexpected app termination. This is...

PT-2026-91671

Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 tvOS versions prior to 27 visionOS versions prior to 27 watchOS versions prior to 27 Description An app may be able to fingerprint the user. Fingerprinting is a technique used to identify a...

PT-2026-91484

Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 Description A memory corruption issue exists where processing a maliciously crafted file may lead to unexpected app termination. This was addressed by...

PT-2026-91472

Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27 Description An application may be able to access sensitive user data due to improper state management. State management refers to the process of maintaining the current status of an application or system ...

PT-2026-91488

Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description A validation issue exists due to insufficient input sanitization. This flaw allows a remote user to trigger an unexpecte...

PT-2026-91503

Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description An access issue exists where an application may be able to access user-sensitive data. This is addressed by implementing...

PT-2026-91516

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has installed...

PT-2026-91561

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iOS versions 26.7 through 26.x iPadOS versions prior to 26.7 iPadOS versions 26.7 through 26.x macOS Tahoe versions prior to 26.7 macOS Sequoia versions prior to 15.8 macOS Golden Gate versions prior to 27 tvOS...

PT-2026-91593

Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 Description An out-of-bounds write issue occurs when processing maliciously crafted NTLM New Technology LAN Manager, a suite of security protocols used...

PT-2026-91703

A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permission...

PT-2026-91707

Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27 Description A malicious application may bypass clickjacking protections for secure prompts. Clickjacking is a technique where a user is tricked into clicking on a hidden or disguised element. This issue w...

CVE-2026-86904: Exposure of Private Personal Information to an Unauthorized Actor

A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permission...

CVE-2026-84518: External Control of Critical State Data

This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed...

CVE-2026-17156: Deserialization of Untrusted Data

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization...

CVE-2026-17133: Improper Neutralization of Special Elements used in an OS Command

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-59570: Improper Input Validation

On affected versions of Zscaler client connector, a pre-installed peer app can tear down the Zscaler tunnel, force user logout, and toggle packet capture...

CVE-2026-85125: Improper Verification of Source of a Communication Channel

The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites...

PT-2026-91678

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 macOS Golden Gate versions prior to 27 visionOS versions prior to 27 watchOS versions prior to 27 Description A heap buffer overflow occurs due to insufficient bounds checking. This issu...