Exploit for Out-of-bounds Write in Apple Ipados

CVE-2024-27815 XNU kernel heap buffer overflow in sbconcatm...

SUSE CVE-2026-89572

In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup applesoccpufreqinit adds OPP tables from firmware, but some failure paths do not remove them. The driver also uses devpmoppremovealldynamic, which is not the right cleanup helper for OPP...

Apple TV < 27 Multiple Vulnerabilities (149036)

According to its banner, the version of Apple TV on the remote device is prior to 27. It is therefore affected by multiple vulnerabilities as described in the 149036 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid346260; scriptversion"1.2";...

Linux Distros Unpatched Vulnerability : CVE-2026-84635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27,...

CVE-2026-91962

A flaw was found in FreeRDP. An integer overflow in the audin Apple backends, specifically when processing FramesPerPacket values from MSGSNDINOPEN messages, allows a malicious RDP Remote Desktop Protocol server to supply crafted values. This can cause the AudioQueueAllocateBuffer size computatio...

DEBIAN-CVE-2026-91962

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSGSNDINOPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer...

UBUNTU-CVE-2026-91962

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSGSNDINOPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer...

CVE-2026-91962

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSGSNDINOPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer...

Vulnerabilities exist in Apple macOS and Samba systems, developed by Apple and Samba.

Apple has identified several vulnerabilities in macOS specifically related to Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. These vulnerabilities include heap-based buffer overflows, use-after-free errors, integer overflows, null pointer dereferences, improper access control, privilege escalation...

Vulnerabilities found in Apple iOS and iPadOS

Apple has identified several vulnerabilities in iOS and iPadOS. These vulnerabilities involve various security issues, such as authentication failures, out-of-bounds write and read errors, use-after-free situations, buffer overflows, race conditions, permission and authorization problems, memory...

CVE-2026-91962

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSGSNDINOPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer...

CVE-2026-91962 FreeRDP before 3.31.0 Integer Overflow via audin Apple backends

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSGSNDINOPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer...

CVE-2026-91962 FreeRDP before 3.31.0 Integer Overflow via audin Apple backends

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSGSNDINOPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer...

EUVD-2026-78638

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSGSNDINOPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer...

CVE-2026-91962 FreeRDP before 3.31.0 Integer Overflow via audin Apple backends

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSGSNDINOPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer...

CVE-2026-86924

creationtimestamp| type| source ---|---|--- 2026-09-15 05:16:58+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 21:15:02+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:01:40+00:00|...

CVE-2026-86917

creationtimestamp| type| source ---|---|--- 2026-09-15 05:16:56+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 20:46:17+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:00:49+00:00|...

CVE-2026-86911

creationtimestamp| type| source ---|---|--- 2026-09-15 05:16:54+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 21:17:24+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:01:31+00:00|...

CVE-2026-86910

creationtimestamp| type| source ---|---|--- 2026-09-15 05:16:52+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 21:17:22+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:01:17+00:00|...

CVE-2026-86909

creationtimestamp| type| source ---|---|--- 2026-09-15 05:16:50+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 21:17:20+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:01:52+00:00|...