SUSE CVE-2026-43670

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy...

CVE-2026-106323

A missing authorization flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553114676...

SUSE CVE-2026-86898

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting...

IOKit DoS

The vulnerability of the IOKit component in operating systems such as macOS, iOS, iPadOS, and watchOS is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

coruna

Coruna — iOS Safari Sandbox Escape & Post-Exploitation C2 Fram...

ish

iSH Un proyecto para ejecutar un shell de Linux en iOS, utilizando emulación x86 en modo usuario y traducción de llamadas al sistema. Para el estado actual del proyecto, consulta la pestaña de issues y los registros de commits. Página de App Store Beta de TestFlight Servidor de Discord Wiki con...

CVE-2026-106309

An incorrect authorization flaw was found in the Selection component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/503708636...

CVE-2026-106414

An improper input validation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/504223609...

CVE-2026-43805-PoC

CVE-2026-43805: IODMACommand State Race Analysis and PoC This is an analysis that found the missing state lock in Apple IOKit's IODMACommand::PerformOperationImpl through a macOS 26.5/26.6 kernel binary diff. In the vulnerable build, while PerformOperation is using the ready state and memory...

Linux Distros Unpatched Vulnerability : CVE-2026-106381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-106189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin poli...

Linux Distros Unpatched Vulnerability : CVE-2026-106309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-106279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process ...

Linux Distros Unpatched Vulnerability : CVE-2026-106203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive...

Linux Distros Unpatched Vulnerability : CVE-2026-106323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially...

Linux Distros Unpatched Vulnerability : CVE-2026-106196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged pa...

Linux Distros Unpatched Vulnerability : CVE-2026-106361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineeri...

Linux Distros Unpatched Vulnerability : CVE-2026-106397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system...

Linux Distros Unpatched Vulnerability : CVE-2026-106406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements v...

Linux Distros Unpatched Vulnerability : CVE-2026-106206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted...