CVE-2026-84514

CVE-2026-84514 affects macOS , where insufficient entitlement checks allowed an app to modify protected parts of the file system . The issue is resolved by adding further entitlement checks in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . No public exploitation or in-the-wild...

EUVD-2026-78042

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...

CVE-2026-84629

CVE-2026-84629 is an Apple privacy vulnerability affecting iOS, iPadOS, tvOS, visionOS, and watchOS . The root cause is insufficient entitlement checks , which allowed a third-party app to fingerprint the user . The issue is fixed in iOS 27, iPadOS 27, tvOS 27, visionOS 27, and watchOS 27 via add...

CVE-2026-77181

Incorrect Authorization vulnerability in Apache Syncope. An administrator with ClientApp's update entitlement is unable to perform the related operation, while ClientApp's create entitlement is checked both for create and update operations on ClientApp. This issue affects Apache Syncope: from...

EUVD-2026-77444

Incorrect Authorization vulnerability in Apache Syncope. An administrator with ClientApp's update entitlement is unable to perform the related operation, while ClientApp's create entitlement is checked both for create and update operations on ClientApp. This issue affects Apache Syncope: from...

CVE-2026-77181 Apache Syncope: ClientApp update entitlement not effective

Incorrect Authorization vulnerability in Apache Syncope. An administrator with ClientApp's update entitlement is unable to perform the related operation, while ClientApp's create entitlement is checked both for create and update operations on ClientApp. This issue affects Apache Syncope: from...

PT-2026-91198

Incorrect Authorization vulnerability in Apache Syncope. An administrator with ClientApp's update entitlement is unable to perform the related operation, while ClientApp's create entitlement is checked both for create and update operations on ClientApp. This issue affects Apache Syncope: from...

PT-2026-78679

Name of the Vulnerable Software and Affected Versions BuildKit versions prior to 0.31.1 Description BuildKit is a toolkit used to convert source code into build artifacts. A custom frontend can send a crafted build request containing an invalid SecurityMode value. The executor/oci/spec linux.go...

PT-2025-13938

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description The issue allows an app to retrieve Safari bookmarks without an entitlement check. This was addressed with additional entitlement checks...

Missing Entitlement Check

github.com/moby/buildkit is vulnerable to Missing Entitlement Check. The vulnerability due to improper validation of the security.insecure entitlement flag within the BuildKit APIs. An attacker can run a malicious container with elevated permissions as a result of this flaw...