SUSE CVE-2026-43712

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash...

SUSE CVE-2026-43713

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website may leak sensitive data...

SUSE CVE-2026-43716

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

SUSE CVE-2026-43721

This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to silently hijack clipboard data...

ROS-20260716-73-0024

The vulnerability of the Omnibox address bar in the Google Chrome browser on iOS operating systems is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

Cisco IOS XE CVE-2023-20198 detection

Detects Cisco IOS XE Web UI and flags CVE-2023-20198 by comparing the advertised IOS XE version against Cisco fixed releases. Falls back to a WSMA show version probe only when the version cannot be read from the Web UI page. !/usr/bin/env python3 -- coding: utf-8 -- import re from typing import...

Cisco IOS CMP CVE-2017-3881 telnet exposure

Passive check for CVE-2017-3881 exposure: telnet reachable on a Cisco IOS or IOS XE device. CMP malformed-option handling is tied to telnet session negotiation; confirm patch level separately before exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Cisco IOS telnet exposure for...

Cisco IOS CMP CVE-2017-3881 credless privilege-15 telnet

CVE-2017-3881: sends malformed Cluster Management Protocol CMP telnet options CISCOKITS to patch in-memory authentication hooks and grant unauthenticated privilege-15 CLI on the next telnet session. ROP gadgets are firmware-specific; wrong image may crash the device. !/usr/bin/env python3 --...

Cisco IOS XE CVE-2023-20198 WSMA privilege escalation

CVE-2023-20198: unauthenticated access to the Cisco IOS XE Web UI WSMA endpoint allows arbitrary CLI execution and creation of a privilege-15 local account. Retrieves a session token from the logout confirmation page, then submits SOAP execCLI or configApply requests to add an administrative user...

Microsoft 365 Copilot iOS Privilege Escalation

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant in iOS operating systems is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

EUVD-2026-44305

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-58617

CVE-2026-58617 affects Microsoft 365 Copilot for iOS. Connected sources describe an improper access control that allows an unauthorized attacker to elevate privileges over the network. Root cause reported as access control deficiencies in the iOS Copilot component; impact is privilege escalation ...

CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability

...

M365 Copilot for iOS Elevation of Privilege Vulnerability

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...

KLA91179 ACE vulnerability in Microsoft Browser

Arbitrary code execution vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-48561 Exploitation CVE list CVE-2026-48561 unknown Solution Install necessary updates from the Settings and more menu, that...

CVE-2026-58595: Improper Restriction of Rendered UI Layers or Frames

Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-58617: Improper Access Control

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-14906

Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4...

CVE-2026-14906

Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4...

CVE-2026-14906

Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4...