EUVD-2026-77873

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected app...

CVE-2026-65414

CVE-2026-65414 is an out-of-bounds write vulnerability across multiple Apple platforms, addressed through improved bounds checking . A remote attacker with no privileges or user interaction may cause unexpected app termination or arbitrary code execution , rated CVSS 9.8 (Critical) . The fix is a...

CVE-2026-65414

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected app...

CVE-2026-84506

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to execute arbitrary code with kernel privileges...

EUVD-2026-78051

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to execute arbitrary code with kernel privileges...

CVE-2026-84506

CVE-2026-84506 is a use-after-free vulnerability in macOS addressed through improved memory management. A local app with low privileges may execute arbitrary code with kernel privileges , rated CVSS 7.8 (High) with local attack vector and no user interaction. The issue is fixed in macOS Golden Ga...

CVE-2026-64752

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2026-64752

CVE-2026-64752 is a memory corruption vulnerability in Apple's CoreMedia framework, disclosed by researcher Nik Tsytsarkin (Meta Red Team X). The fix removes the vulnerable code entirely. Processing a maliciously crafted image may lead to arbitrary code execution . The vulnerability affects iOS 2...

EUVD-2026-78034

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution...

CVE-2026-65374

CVE-2026-65374 is a memory corruption flaw in Apple macOS , triggered when a user connects to a malicious WebDAV server , potentially leading to arbitrary code execution . The issue was fixed with improved validation in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . The CVSS 3...

CVE-2026-65374

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution...

CVE-2026-43692

A validation issue in macOS (fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7) was addressed through improved input sanitization . A remote user may trigger unexpected app termination or arbitrary code execution , with a CVSS 3.1 score of 8.8 (HIGH) requiring user interacti...

EUVD-2026-77996

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote user may cause an unexpected app termination or arbitrary code execution...

CVE-2026-43692

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote user may cause an unexpected app termination or arbitrary code execution...

CVE-2023-43208

CVE-2023-43208 Mirth Connect RCE PoC Script Python de prueba de concepto dirigido a CVE-2023-43208 en Mirth Connect. Aviso legal Úselo únicamente en entornos de los que sea propietario o para los que tenga autorización explícita de prueba. Este repositorio es para investigación de seguridad,...

CVE-2026-22241

CVE-2026-22241 Entorno de laboratorio para CVE-2026-22241 Descripción de la vulnerabilidad: Vulnerabilidad: Carga sin restricciones de archivos con tipo peligroso. Impacto: Ejecución remota de código RCE. Descripción: Esta falla permite a un atacante con privilegios administrativos cargar un...

CVE-2026-3891

CVE-2026-3891 — Pix para WooCommerce: Subida de Archivos No Autenticada y RCE Fuga de Nonce → Subida de certificatecrtpath → Ejecución de Código Resumen CVE-2026-3891 es una vulnerabilidad de subida arbitraria de archivos no autenticada de severidad crítica CVSS 9.8 en el plugin de WordPress Pix...

CVE-2026-54424

CVE-2026-54424 Exploiting Parsec for Windows versions 150-104a to gain: Remote code execution as SYSTEM Arbitrary file read as SYSTEM NTLM hash capture for SYSTEM The exploits stem from the same vulnerability, but the actual paths diverge. Technical writeup:...

vuln-app-CVE-2025-55182

Aplicación Next.js RSC Vulnerable - CVE-2025-55182 ⚠️ ADVERTENCIA: Esta aplicación es intencionalmente vulnerable solo con fines educativos y de investigación de seguridad. NO la implemente en producción ni la exponga a internet. Resumen Esta es una aplicación Next.js vulnerable que demuestra...

CVE-2025-52691

CVE-2025-52691 SmarterMail Build 9406 y anteriores es vulnerable a la subida arbitraria de archivos. Un atacante no autenticado puede subir archivos arbitrarios a cualquier ubicación en el servidor de correo, lo que potencialmente permite la ejecución remota de código. ¿Cómo funciona este método ...