The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-84543

CVE-2026-84543 is an out-of-bounds access vulnerability in macOS SMB server connection handling, addressed with improved bounds checking. Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory . The issue is fixed in macOS Golden Gate 27 , macOS Sequ...

EUVD-2026-78106

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

EUVD-2026-77933

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

EUVD-2026-77920

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2026-65357

CVE-2026-65357 is a memory handling flaw affecting multiple Apple operating systems. An app may be able to cause unexpected system termination or write kernel memory , indicating a potential integrity risk at the kernel level. The issue was addressed with improved memory handling and is fixed in ...

CVE-2026-43790

CVE-2026-43790 is a memory handling flaw in macOS that allows a remote attacker to cause unexpected system termination or corrupt kernel memory . The fix is available in macOS Golden Gate 26.7 , macOS Sequoia 15.8 , and macOS Tahoe 27 . No CVSS metrics or active exploitation details are provided ...

EUVD-2026-78045

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D scene may lead to...

CVE-2026-84526

CVE-2026-84526 is an out-of-bounds write in Apple's 3D scene processing, fixed via improved bounds checking. Processing a maliciously crafted 3D scene may lead to unexpected process termination . The vulnerability affects multiple Apple platforms: iOS 26.7 / iPadOS 26.7 , iOS 27 / iPadOS 27 , mac...

CVE-2026-84588

CVE-2026-84588 is a memory corruption vulnerability in macOS Golden Gate 27 (Apple). The root cause is vulnerable code that was removed in the fix. The attack vector involves mounting a maliciously crafted disk image , which may lead to unexpected system termination or kernel memory corruption . ...

EUVD-2026-78041

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

EUVD-2026-77998

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-84520

CVE-2026-84520 is a buffer overflow in macOS Golden Gate 27 , addressed through improved size validation. A local attacker may be able to cause unexpected system termination or corrupt kernel memory , indicating potential denial-of-service or integrity implications at the kernel level. The issue ...

CVE-2026-84536

CVE-2026-84536 is an integer underflow in the SMB implementation on macOS, fixed through improved input validation in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . Connecting to a malicious SMB server may lead to unexpected system termination (crash/denial of service). The ro...

CVE-2026-43702

Apple memory handling vulnerability triggered by processing a maliciously crafted video file , potentially leading to unexpected app termination or corrupt process memory . The flaw is fixed in iOS 26.6/26.7 , iPadOS 26.6/26.7 , macOS Sequoia 15.8 , macOS Tahoe 26.6/26.7 , tvOS 26.6 , and watchOS...

CVE-2026-53716

Envoy Gateway (open-source application gateway managing Envoy Proxy) has an unbounded gzip decompression vulnerability in getFileFromGZ within internal/wasm/httpfetcher.go. The function calls io.ReadAll on a gzip.Reader without limiting the decompressed output size. When a tenant-controlled Envoy...

CVE-2026-53719

Envoy Gateway (open-source Kubernetes application gateway) contains a nil-dereference in translateSecurityPolicyForRoute (internal/gatewayapi/securitypolicy.go) that triggers when a namespace-scoped tenant creates a SecurityPolicy targeting a TCPRoute while omitting spec.authorization. The result...

rsync: rsync: Memory corruption via out-of-bounds write in size parsing

An out-of-bounds write vulnerability in rsync's parsesizearg function allows a remote attacker to cause memory corruption. The flaw is triggered when snprintf truncates a formatted size string, resulting in an incorrect memory array index. Exploitation can lead to a denial of service and...

EUVD-2026-77778

The ITE it82xx2 USB device-controller driver initialized its bus-suspend detection work with kworkinitdelayable&priv-suspendedwork, suspendedhandler inside it82xx2enable the driver's .enable op in drivers/usb/udc/udcit82xx2.c. This work item is scheduled essentially continuously while the USB bus...

CVE-2026-15893

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...