EUVD-2026-110322

This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A remote attacker may be able to break out of Web Content sandbox...

CVE-2026-116632

A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerability was fixed in Firefox for iOS 156.1...

CVE-2026-116631 External protocol handler (tel:) address bar spoof

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1...

CVE-2026-116631

The Firefox for iOS browser is affected by a vulnerability where a malicious web page can trigger a tel: link in a window displaying a different website. This causes the resulting phone-call prompt to appear as if it were requested by the original site, potentially leading to address bar spoofing...

EUVD-2026-110068

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1...

CVE-2026-116632 Facetime protocol handler enabled spoofing

A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerability was fixed in Firefox for iOS 156.1...

CVE-2026-116632

A vulnerability in Firefox for iOS allows a malicious web page to insert arbitrary text into the FaceTime call prompt shown by the iOS system. This flaw enables an attacker to display phishing messages directly within the system UI. The issue was addressed in Firefox for iOS 156.1 .

EUVD-2026-110067

A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerability was fixed in Firefox for iOS 156.1...

appmon

Welcome to AppMon! As seen at US & EU AppMon is an automated framework for monitoring and tampering system API calls of native macOS, iOS and android apps. It is based on Frida. This project was only possible because of Ole André Vadla Ravnås and I dedicate it to him. Follow him on GitHub, Twitte...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network...

CVE-2018-4407

CVE-2018-4407 Kernel crash caused by out-of-bounds write in Apple's ICMP packet-handling code CVE-2018-4407 for iOS 11.0，11.2，11.3.1...

Cisco IOS XE Web UI - Command Injection

A vulnerability in the web UI component of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to improper input validation in the web UI. An attacker could exploit...

Cisco IOS XE WLC - Arbitrary File Upload

A vulnerability in the Out-of-Band Access Point AP Image Download feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system.This vulnerability is due to the presence of a hard-coded JSON Web...

About the security content of iOS 18.7.11 and iPadOS 18.7.11

Download JSON About the security content of iOS 18.7.11 and iPadOS 18.7.11 This document describes the security content of iOS 18.7.11 and iPadOS 18.7.11. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation...

About the security content of iOS 26.7.2 and iPadOS 26.7.2

Download JSON About the security content of iOS 26.7.2 and iPadOS 26.7.2 This document describes the security content of iOS 26.7.2 and iPadOS 26.7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...

About the security content of iOS 27.2 and iPadOS 27.2

Download JSON About the security content of iOS 27.2 and iPadOS 27.2 This document describes the security content of iOS 27.2 and iPadOS 27.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurre...

PT-2026-125159

A race condition was addressed with improved state handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory...

PT-2026-125459

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2. A malicious app may be able to access the camera without user...

Apple Security Advisory 10-26-2026-1

Apple Security Advisory 10-26-2026-1 - iOS 27.2 and iPadOS 27.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, memory corruption, buffer overflow, integer overflow, and information disclosure vulnerabilities...

Apple Security Advisory 10-26-2026-2

Apple Security Advisory 10-26-2026-2 - iOS 26.7.2 and iPadOS 26.7.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, memory corruption, buffer overflow, integer overflow, and information disclosure vulnerabilities...