CVE-2026-112658

A validation issue exists in iOS , iPadOS , and macOS (specifically versions prior to Golden Gate 27.2 ) where improper input validation allows an application to potentially access sensitive user data . The vulnerability is addressed in iOS 27.2 , iPadOS 27.2 , and macOS Golden Gate 27.2 through ...

EUVD-2026-110364

This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access sensitive user data...

CVE-2026-112658

This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may be able to access sensitive user data...

CVE-2026-86880

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data...

EUVD-2026-110361

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data...

CVE-2026-86880

A vulnerability in iOS and iPadOS allows an app to potentially access sensitive user data . The root cause is a lack of sufficient entitlement checks . This issue is fixed in iOS 26.7.2 , iPadOS 26.7.2 , iOS 27 , and iPadOS 27 . No specific exploit details or exploit links are provided in the doc...

EUVD-2026-110333

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user...

CVE-2026-112455

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user...

CVE-2026-112455

An authorization issue caused by improper state management was identified in several Apple operating systems. The vulnerability could allow an application to access sensitive user data . This issue has been addressed through improved state management and is fixed in iOS 26.7.2/27.2 , iPadOS 26.7....

CVE-2026-112547

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data...

EUVD-2026-110331

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data...

CVE-2026-112547

A type confusion issue exists in iOS and iPadOS that could allow an application to access sensitive user data . This vulnerability was addressed with improved checks and is fixed in iOS 27.2 and iPadOS 27.2 . While the documents do not provide specific functional components or files, broader repo...

CVE-2026-112506

A permissions issue in macOS was addressed with improved validation. This vulnerability could allow an application to access sensitive user data . The issue has been resolved in macOS Golden Gate 27.2 . No specific exploitation details or in-the-wild activity are provided in the documents.

CVE-2026-112506

A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data...

EUVD-2026-110324

A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data...

DEBIAN-CVE-2026-65627

Improper Handling of Highly Compressed Data Data Amplification vulnerability in potatosalad jose erlang-jose allows a remote attacker to exhaust a node's memory with a small crafted JWE token. The josejwezip:uncompress/2 function in src/jwe/josejwezip.erl decompresses the DEFLATE-compressed...

AZL-111152 CVE-2026-65627 affecting package jose 14-3

Improper Handling of Highly Compressed Data Data Amplification vulnerability in potatosalad jose erlang-jose allows a remote attacker to exhaust a node's memory with a small crafted JWE token. The josejwezip:uncompress/2 function in src/jwe/josejwezip.erl decompresses the DEFLATE-compressed...

CVE-2026-65627

Improper Handling of Highly Compressed Data Data Amplification vulnerability in potatosalad jose erlang-jose allows a remote attacker to exhaust a node's memory with a small crafted JWE token. The josejwezip:uncompress/2 function in src/jwe/josejwezip.erl decompresses the DEFLATE-compressed...

UBUNTU-CVE-2026-65627

Improper Handling of Highly Compressed Data Data Amplification vulnerability in potatosalad jose erlang-jose allows a remote attacker to exhaust a node's memory with a small crafted JWE token. The josejwezip:uncompress/2 function in src/jwe/josejwezip.erl decompresses the DEFLATE-compressed...

EUVD-2026-110306

Improper Handling of Highly Compressed Data Data Amplification vulnerability in potatosalad jose erlang-jose allows a remote attacker to exhaust a node's memory with a small crafted JWE token. The josejwezip:uncompress/2 function in src/jwe/josejwezip.erl decompresses the DEFLATE-compressed...