EUVD-2026-78256

Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass. This issue affects xClick: R2, R3, and R3.1...

ROS-20260915-73-0055

The vulnerability of the Reading Mode in Microsoft Edge and Google Chrome browsers is related to insufficient validation of entered data. Exploiting this vulnerability can allow a remote attacker to bypass the sandbox’s security mechanisms...

ROS-20260915-73-0049

The vulnerability of the Autofill component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-92123

Payload Plugins is a collection of plugins designed to enhance Payload CMS. From 0.3.0 until 0.4.0, @jhb.software/payload-cloudinary-plugin deployments with clientUploads enabled expose POST /api/cloudinary-generate-signature, whose handler in cloudinary/src/getGenerateSignature.ts passes...

ROS-20260915-73-0082

The vulnerability of the Password Manager component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260915-73-0037

The vulnerability of the Password Manager component in Google Chrome and Microsoft Edge browsers is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

PT-2026-92154

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...

PT-2026-92144

Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access affected versions not specified Description Insufficient validation of incoming request resources could allow a remote attacker to cause a denial of service, which is a condition where the system becomes unavailable ...

ROS-20260915-73-0181

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260915-73-0068

The vulnerability of the API for working with foldable devices involves insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms remotely...

ROS-20260915-73-0043

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created video file...

ROS-20260915-73-0001

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

CVE-2026-84618

A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

CVE-2026-84580

The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox...

CVE-2026-84631

A privilege escalation vulnerability exists in macOS (specifically affecting Golden Gate 27 , Sequoia 15.8 , and Tahoe 26.7 ). The root cause involves improper access control and insufficient entitlement checks , which could allow an application to gain root privileges . Impacted systems may also...

CVE-2026-65361

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

CVE-2026-13260 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...

CVE-2026-13260

IBM Verify Identity Access and IBM Security Verify Access are affected by a vulnerability where a remote attacker could cause a denial of service . The root cause is the insufficient validation of incoming request resources , specifically involving the allocation of resources without limits or th...

Vulnerability exposure in Cisco Secure Email Gateway

Cisco has identified a vulnerability in Cisco Secure Email Gateway. This vulnerability lies in the processing of email messages within the Cisco AsyncOS software for Cisco Secure Email Gateway. It arises due to insufficient validation of incoming email messages. An unauthorized malicious actor ca...

CVE-2026-90560

A flaw was found in zstd-jni. This vulnerability, an out-of-bounds read, occurs in the ZstdDictDecompress constructor due to insufficient validation of offset and length arguments against dictionary array bounds. A remote attacker could exploit this by providing specially crafted input, leading t...