CVE-2026-43756

A logic issue in the Control Center component of macOS Sequoia allows an application to potentially access user-sensitive data . The vulnerability was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8 , macOS Sonoma 14.8.8 , and macOS Tahoe 26.6 . No specific exploit...

EUVD-2026-49558

An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user data...

CVE-2026-43770

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. An app may be able to access sensitive user data...

EUVD-2026-49545

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. An app may be able to access sensitive user data...

EUVD-2026-49519

This issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-43801

An App Store vulnerability in Apple devices allows an application to access sensitive user data . The issue was addressed with improved checks . Affected products include iPhone XS, iPhone XS Max, iPhone XR, and iPad 7th generation . Remediation is available in iOS 18.7.10, iPadOS 18.7.10, iOS 26...

EUVD-2026-49506

This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. An attacker with physical access may be able to access sensitive user data during iPhone Mirroring...

CVE-2026-64723

A logic issue was identified in Apple products, which could allow an application to access sensitive user data . This vulnerability is addressed in iOS 18.7.10 , iPadOS 18.7.10 , macOS Sequoia 15.7.8 , macOS Sonoma 14.8.8 , and macOS Tahoe 26.6 through improved checks. No specific exploit details...

CVE-2026-43714

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. A malicious app may be able to access protected user data...

CVE-2026-43714

Apple has addressed a vulnerability where a malicious app could potentially access protected user data due to insufficient input sanitization. This issue is fixed in iOS 18.7.10 , iPadOS 18.7.10 , iOS 26.6 , iPadOS 26.6 , macOS Sequoia 15.7.8 , macOS Sonoma 14.8.8 , macOS Tahoe 26.6 , visionOS 26...

CVE-2026-43759

CVE-2026-43759 is an authorization issue within the CoreMedia component of watchOS 26.6 (specifically for Apple Watch Series 6 and later). The vulnerability was caused by inadequate state management , which could allow an application to access sensitive user data . This issue has been addressed b...

CVE-2026-43758

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-43774

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data...

EUVD-2026-49620

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data...

CVE-2026-17191

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended...

CVE-2026-17191 VeloCloud Orchestrator Flow Metrics API SQL Injection

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended...

EUVD-2026-49371

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended...

CVE-2026-17191

CVE-2026-17191 is an input-validation vulnerability in the VeloCloud Orchestrator Flow Metrics API. An authenticated user can abuse the API component to manipulate backend queries, which may lead to unauthorized access to data beyond the user’s privileges and could trigger unintended outbound net...

CVE-2026-17191

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended...

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues Upgrade to upstream tag jdk-11.0.32+9 July 2026 CPU. Security issues fixed: CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in CubeSize bsc1264994. CVE-2026-46917: unauthenticated attacker with...