CVE-2026-84512

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84565

CVE-2026-84565 is an out-of-bounds read in macOS disk image processing, addressed with improved bounds checking. A locally crafted malicious disk image may cause unexpected app termination , with NVD scoring it 7.1 HIGH (AV:L/AC:L/PR:N/UI:R) due to high confidentiality and availability impact. Th...

EUVD-2026-77903

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted disk image may lead to unexpected app termination...

CVE-2026-84565

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted disk image may lead to unexpected app termination...

CVE-2026-84565

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted disk image may lead to unexpected app termination...

CVE-2026-84588

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84588

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

EUVD-2026-78041

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84588

A memory corruption issue exists in macOS affecting Golden Gate 27 , Sequoia 15.8 , and Tahoe 26.7 . The vulnerability is triggered by mounting a maliciously crafted disk image , which may result in unexpected system termination or kernel memory corruption . The issue was addressed by removing th...

CVE-2026-28934

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination...

CVE-2026-28934

A buffer overflow vulnerability exists in macOS because of insufficient bounds checking. An attacker could exploit this by tricking a user into mounting a malicious disk image , which may result in unexpected system termination . This issue has been addressed in macOS Golden Gate 27 , macOS Sequo...

CVE-2026-28934

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination...

EUVD-2026-78096

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination...

CVE-2026-54177 backpack/crud: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserver

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, HasUploadFields methods uploadFileToDisk and uploadMultipleFilesToDisk, used through CrudTrait...

CVE-2026-54177

backpack/crud (a Laravel Backpack package for building admin panels) is vulnerable to arbitrary file upload in versions 6.0.0 through 6.8.14 and 7.0.38 . The HasUploadFields trait and FileNameGenerator preserve the client-supplied file extension without rejecting server-executable types. An authe...

CVE-2026-54178

backpack/crud (a Laravel admin-panel package) is vulnerable to arbitrary file deletion in HasUploadFields::uploadMultipleFilesToDisk. The method trusts disk-relative paths from the clear_[] request input and calls Storage::disk()->delete() without verifying that the paths belong to the current...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: dm raid: fixed the KASAN warning in raid5adddisks. There is a KASAN warning in raid5adddisk when running the LVM testsuite. The warning occurs during the test lvconvert-raid-reshape-lineartoraid6-single-type.sh. We fixed this...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: nilfs2: Fixed a shift-out-of-bounds/overflow issue in nilfssb2badoffset. The patch series “nilfs2: Fix UBSAN shift-out-of-bounds warnings during mount time” addresses this issue. The first patch fixes a bug reported by syzbot,...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: jfs: Rejects inodes of an unsupported type that are on the disk. Syzbot has reported the following bug: Kernel bug at fs/inode.c:668! Oops: Invalid opcode: 0000 1 PREEMPT SMP KASAN PTI CPU: 3 UID: 0 PID: 139 Comm: jfsCommit No...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: hfsplus: Verify the inode mode when loading from disk. syzbot reports that the SIFMT bits of the inode-imode field can become invalid when the SIFMT bits of the 16-bit “mode” field loaded from disk are corrupted. According to ...