CVE-2026-84520: Buffer Copy without Checking Size of Input

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local attacker may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-84550: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

CVE-2026-65375: Improper Authentication

The issue was addressed with improved authentication. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination...

CVE-2026-84558: Double Free

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination...

CVE-2026-84517: Integer Overflow or Wraparound

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

CVE-2026-84563: Access of Resource Using Incompatible Type

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

CVE-2026-86910: Improper Limitation of a Pathname to a Restricted Directory

A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be able to access restricted files...

CVE-2026-84554: Integer Overflow or Wraparound

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to cause a denial-of-service...

CVE-2026-84535: Improper Access Control

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox...

CVE-2026-65381: Missing Authorization

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox...

CVE-2026-86910: Improper Limitation of a Pathname to a Restricted Directory

A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be able to access restricted files...

CVE-2026-84514: Missing Authorization

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system...

PT-2026-91531

Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description An application may be able to gain root privileges due to insufficient checks. Recommendations Update macOS Golden Gate ...

CVE-2026-86898: Improper Neutralization of Input During Web Page Generation

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting...

Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliers

Summary Five Filament groupedBulkActions blocks across the Shopper admin Livewire pages omit the -authorize... permission gate, while their per-record sibling actions and other Shopper Index pages such as Pages/Settings/Currencies.php, Pages/Reviews/Index.php, Pages/Collection/Index.php, and...

CVE-2026-89672

CVE-2026-89672 affects the Linux kernel's NFS server daemon (nfsd) in the NFSACL v2 SETACL path. The function nfsacld_proc_setacl() passes both argp->acl_access and argp->acl_default pointers to set_posix_acl() unconditionally, even when the request mask does not include the corresponding b...

CVE-2026-89672 nfsd: gate nfs2 setacl by argp->mask

In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs2 setacl by argp-mask The NFSACL v2 SETACL path shares the decoder convention used by its v3 sibling: nfsaclsvcdecodesetaclargs fills in argp-aclaccess only when NFSACL is set in the request mask and argp-acldefault...

PT-2026-90388

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the NFSACL v2 SETACL path where the nfsacld proc setacl function passes pointers to set posix acl unconditionally. Because nfsaclsvc decode setaclargs only populates...

GHSA-35JJ-42HP-8GMQ n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket

Impact The /chat WebSocket route resumed a paused execution from a resume token without checking that the node being resumed was a chat node. n8n hands that token to anonymous form submitters, so a party with no account could present it on the chat route and release an execution waiting at an...

NPM: n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket

NPM: n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket vulnerability discovered by ? in WordPress Npm n8n versions 2.37.7...