13 matches found
CVE-2026-17601
A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment...
EUVD-2026-54514
A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment...
CVE-2026-17601
CVE-2026-17601 affects Nexus Repository 3. A user with permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions, including full administrative access, without additional authorization checks. The vulnerability ena...
CVE-2026-28954
A file quarantine bypass vulnerability exists in several Apple products, where a maliciously crafted disk image can bypass Gatekeeper security checks. This issue has been addressed with additional checks. The vulnerability is fixed in iOS 18.7.9 , iPadOS 18.7.9 , macOS Sequoia 15.7.7 , macOS Sono...
PT-2026-39802
A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A maliciously crafted disk image may bypass Gatekeeper checks...
PT-2026-65121
Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 Description A maliciously crafted ZIP archive may bypass Gatekeeper checks, allowing a file quarantine bypass. Gatekeeper is a security feature that ensures only...
CVE-2018-4436
A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2...
CVE-2025-43412
A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to break out of its sandbox...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-416978)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-416978 advisory. In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If thi...
PT-2025-37833
Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: A file quarantine bypass existed due to missing checks, potentially allowing an application to escape its sandbox...
CLSA-2022-1644501113 Fix CVE(s): CVE-2021-44142
SECURITY UPDATE: code exec via out-of-bounds read/write in vfsfruit - debian/patches/CVE-2021-44142.patch: refactor getentry function in order to add additional checks - CVE-2021-44142...
Moneybird: IDOR in https://moneybird.com/user/accountant_company/edit(change company name)
Reporter found a way to change the name of an accountant company for which he didn't have permissions. We added extra checks to prevent these kind of Insecure Direct Object Reference bugs...