CVE-2026-19743: Improper Limitation of a Pathname to a Restricted Directory

Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges NT AUTHORITY/SYSTEM \ root. By sending crafted I...

PT-2026-102663

Name of the Vulnerable Software and Affected Versions TeamViewer Full Client and Host versions prior to 15.82 Description An improper access control weakness in the software allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By...

PT-2026-102661

Name of the Vulnerable Software and Affected Versions TeamViewer Full Client and Host for Linux and macOS versions prior to 15.82 Description A heap-based buffer overflow occurs during the processing of .tvs session recording files. A size mismatch during the decompression of recorded session dat...

Apple Multiple Products Out-of-Bounds Write Vulnerability

Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution...

CVE-2026-92368: Heap-based Buffer Overflow

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

PT-2026-102977

Name of the Vulnerable Software and Affected Versions Electron versions prior to 42.0.0-beta.2 Electron versions prior to 41.10.5 Electron versions prior to 39.8.10 Description On macOS, the Squirrel.Mac auto-update framework bundled with Electron includes a privileged ShipIt helper that executes...

CVE-2026-86950

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have...

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950 , refers to an out-of-bounds write impacting the CoreGraphics component that could lead...

CVE-2026-86950

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have...

CVE-2026-86950

The CoreGraphics framework, a core component used by Apple for processing visual content like images and PDFs, contains an out-of-bounds write vulnerability. This flaw occurs when the software writes data beyond its allocated memory limits, potentially allowing an attacker to execute arbitrary co...

CVE-2026-86950

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have...

EUVD-2026-88445

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have...

CVE-2026-4556 macOS Exam4 Local Privilege Escalation via Command Injection

Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...

CVE-2026-4556 macOS Exam4 Local Privilege Escalation via Command Injection

Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...

Exploit for Protection Mechanism Failure in Apple Macos

CVE-2026-28912 — Reverse engineering notes and reproduction I...

VulnCheck KEV: CVE-2026-86950

Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution...

Apple Security Advisory 09-28-2026-3

Apple Security Advisory 09-28-2026-3 - macOS Sequoia 15.8.1 addresses out of bounds write and arbitrary code execution vulnerabilities...

Input Leap Arbitrary File Write

Input Leap versions through 3.0.3 the final release and master, on Windows and macOS, allow a connected peer to write a file outside the configured drop-target directory...

Apple Security Advisory 09-28-2026-2

Apple Security Advisory 09-28-2026-2 - macOS Tahoe 26.7.1 addresses out of bounds write and arbitrary code execution vulnerabilities...

CVE-2026-86950: Out-of-bounds Write

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have...