Lucene search
K

358 matches found

ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-11165

Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

5.8AI score
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 4 days ago7 views

CVE-2026-9308 Arbitrary JavaScript execution in Reader View due to wrong HTML replacement order

Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A malicious page could include a placeholder string that was later substituted with JSON-LD data, potentially resulting in arbitrary JavaScript execution. This vulnerability was...

5.9AI score0.00038EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/19 2:27 p.m.27 views

CVE-2026-8706 Sensitive user data could be leaked to other applications through Reader mode

Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receive the response rendered with the signed-in user's cookies. This vulnerability was fixed in Firefox for iOS 151.0...

0.00019EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2026/03/24 2:59 p.m.177 views

DarKSward

DarKSward-DarKSword Webpack source code reconstruction of the...

5.8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.1 views

PT-2026-27593

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.4 iOS versions prior to 18.7.7 iPadOS versions prior to 18.7.7 macOS Tahoe versions prior to 26.4 Description A logic issue exists that, if exploited via a maliciously crafted website, may lead to a cross-site...

6.5CVSS5.8AI score0.00179EPSS
Exploits0References134
OSV
OSV
added 2026/03/17 11:16 p.m.3 views

UBUNTU-CVE-2026-20643

A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadOS, and macOS, Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously...

5.4CVSS5.8AI score0.00031EPSS
Exploits2References3
CVE
CVE
added 2026/02/12 10:48 p.m.7 views

CVE-2019-25341

CVE-2019-25341 affects iNetTools for iOS (version 8.20) where the Whois feature is vulnerable to a denial-of-service via a crafted 98-character input in the Domain Name field, causing the app to crash. The CVSS metrics indicate a high-severity impact with availability loss (AV:N/AC:L/PR:N/UI:N/S:...

7.5CVSS5.8AI score0.00042EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/02/11 10:58 p.m.22 views

CVE-2026-20676

This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A website may be able to track users through Safari web extensions...

0.00052EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/09 12:29 p.m.4 views

CVE-2023-40434

A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access a user's Photos Library...

3.3CVSS6.1AI score0.00051EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.1 views

PT-2025-49195

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 5...

4.7CVSS6.9AI score0.00046EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/11/25 12:25 a.m.3 views

SUSE CVE-2025-43430

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

4.3CVSS6.7AI score0.00111EPSS
Exploits0References10
OSV
OSV
added 2025/11/04 2:15 a.m.0 views

CVE-2025-43391

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2, iOS 26.1 and iPadOS 26.1. An app may be able to access sensitive user data...

5.5CVSS5.7AI score
Exploits0References4
Cvelist
Cvelist
added 2025/11/04 1:15 a.m.3 views

CVE-2025-43444

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user...

0.00054EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.1 views

Apple多款产品 安全漏洞

Apple Safari and others are products of Apple Inc. Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. A security vulnerability...

4.3CVSS6.1AI score0.00076EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2009-3254

Malware in sbrugna...

4.3CVSS6.4AI score0.05161EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2009-1680

Malware in sbrugna...

4.3CVSS6.1AI score0.00644EPSS
Exploits2References16
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-2316

Malware in sbrugna...

9.3CVSS6.1AI score0.03618EPSS
Exploits2References16
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2009-2784

Malware in sbrugna...

4.6CVSS6.4AI score0.00048EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2009-1683

Malware in sbrugna...

4.3CVSS6.1AI score0.00644EPSS
Exploits2References16
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2009-0957

Malware in sbrugna...

4.3CVSS6.4AI score0.0065EPSS
Exploits0References7
Rows per page
Query Builder