401250 matches found
PT-2026-125333
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data...
PT-2026-128243
Name of the Vulnerable Software and Affected Versions PickPlugins Accordion versions prior to 2.3.26 Description Deserialization of untrusted data allows for PHP Object Injection. Authenticated attackers with editor-level access and above can inject a PHP Object. While no POP chain a sequence of...
PT-2026-125478
Name of the Vulnerable Software and Affected Versions libfvde versions prior to 20260923 Description A heap out-of-bounds read occurs in the libfvde encrypted metadata read type 0x001a function due to an unbounded strlen operation on embedded XML plist data. An attacker can trigger this by...
PT-2026-125268
This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data...
PT-2026-125356
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data...
PT-2026-125243
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data...
PT-2026-123451
When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory...
PT-2026-123286
Frappe Builder versions before 1.36.1 contain a server-side request forgery vulnerability in the convert to webp API endpoint, which lacks the has page write access control applied to similar asset-ingest handlers and performs an unprotected requests.get call that follows redirects without...
PT-2026-123476
Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In decodeTile and the RGBA unpacker path, when Pillow and libtiff interpret duplicated PhotometricInterpretation or BitsPerSample tags differently,...
Google Chrome Microsoft Edge Data Compromise
The HTML component vulnerability in Google Chrome and Microsoft Edge web browsers is related to a lack of secure information protection mechanisms. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML...
Google Chrome Microsoft Edge Data Compromise
The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge web browsers is related to insufficient registration validation. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML pa...
Google Chrome Microsoft Edge Data Compromise
The Credential Management component vulnerability in Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected data by using a...
Google Chrome Edge Data Compromise
The Core component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...
Passwords Component Data Compromise
The vulnerability in the Password component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of user-supplied protected information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a...
Google Chrome Microsoft Edge Data Compromise
The vulnerability in the Browser component of Google Chrome and Microsoft Edge is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...
Google Chrome Microsoft Edge UI Component DoS
The UI component vulnerability in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as cause a denial-of-service condition via a...
Geometry component of Google
The Geometry component vulnerability in Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as cause a...
Geometry component of Google
The Geometry component vulnerability in Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as cause a...
PT-2026-125258
Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27.2 Description A privacy issue exists where an application may be able to access sensitive user data. This was addressed by moving the sensitive data to a more secure location. Recommendations Update to...
PT-2026-125326
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data...