PT-2026-132060

Apple has patched a vulnerability I reported that had been present for over a decade. The fix was released in macOS 27.2. CVE-2026-112445 Of all the local privilege escalation LPE vulnerabilities I’ve seen, this is probably the easiest to exploit, the most straightforward, and the most bizarre—so...

Ubiquiti WiFiman Desktop for macOS permission and access control issue vulnerability

Versions prior to 1.3.0 of Ubiquiti WiFiman Desktop for macOS contain a vulnerability related to permission escalation and access control. This vulnerability stems from improper access controls and may allow malicious attackers with local access and elevated privileges to escalate their privilege...

Ubiquiti WiFiman Desktop for macOS input validation error vulnerability

Ubiquiti WiFiman Desktop for macOS versions prior to 1.3.0 contain an input validation error vulnerability stemming from improper control over external filenames or paths. Attackers with local access and low privileges can exploit this vulnerability to execute arbitrary commands on the host devic...

Ubiquiti WiFiman Desktop for macOS configuration error vulnerability

A configuration error vulnerability exists in Ubiquiti WiFiman Desktop for macOS versions prior to 1.3.0. This vulnerability arises from binding to unrestricted IP addresses, potentially allowing malicious attackers with network access to obtain information about host devices...

CVE-2026-119250: Ubiquiti Inc WiFiman Desktop for macOS: A malicious actor with local access and low privileges could exploit an External Control of File Name or Path…

A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop for macOS to execute arbitrary commands with root privileges on the host device...

About the security content of Xcode 27.2

Download JSON About the security content of Xcode 27.2 This document describes the security content of Xcode 27.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

Google Chrome < 156.0.8078.79 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 156.0.8078.79. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop02107719452 advisory. - Use after free in Input. CVE-2026-76031 - Use after free in Frames...

Charles-Proxy-Mobile-Guide

Charles Proxy Mobile Guide The mobile hackers' guide to Charles Proxy 👍 Intro Charles is an HTTP proxy / HTTP monitor / Reverse Proxy that enables a developer to view all of the HTTP and SSL / HTTPS traffic between their machine and the Internet. This includes requests, responses and the HTTP...

CVE-2026-118688

wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on macOS and FreeBSD hosts to follow directory symlinks. A guest with sandbox write access can rename a relative symlink such as "up/" to...

DEBIAN-CVE-2026-118688

wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on macOS and FreeBSD hosts to follow directory symlinks. A guest with sandbox write access can rename a relative symlink such as "up/" to...

CVE-2026-118688 Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename

wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on macOS and FreeBSD hosts to follow directory symlinks. A guest with sandbox write access can rename a relative symlink such as "up/" to...

CVE-2026-118688 Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename

wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on macOS and FreeBSD hosts to follow directory symlinks. A guest with sandbox write access can rename a relative symlink such as "up/" to...

CVE-2026-118688

wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on macOS and FreeBSD hosts to follow directory symlinks. A guest with sandbox write access can rename a relative symlink such as "up/" to...

CVE-2026-118688

The wasmtime-wasi component in Wasmtime versions before 36.0.18 , 37.0.0 before 48.0.6 , and 49.0.0 before 49.0.3 contains a vulnerability where it re-appends a trailing slash to rename source paths. This behavior causes the renameat system call on macOS and FreeBSD hosts to follow directory syml...

EUVD-2026-112393

wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on macOS and FreeBSD hosts to follow directory symlinks. A guest with sandbox write access can rename a relative symlink such as "up/" to...

Vulnerabilities fixed in Apple MacOS

Apple has addressed multiple vulnerabilities in macOS, particularly in versions Golden Gate 27.2, Sequoia 15.8.2, Tahoe 26.7.2, and Monterey 12.4. These vulnerabilities affect various aspects of macOS security, including insufficient validation of symbolic links, improper permission checks,...

Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the Tailscale background...

PT-2026-129161

wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on macOS and FreeBSD hosts to follow directory symlinks. A guest with sandbox write access can rename a relative symlink such as "up/" to...

Apple macOS CoreText GDEF LigCaretList Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2026-118688: bytecodealliance wasmtime: wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to…

wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on macOS and FreeBSD hosts to follow directory symlinks. A guest with sandbox write access can rename a relative symlink such as "up/" to...