CVE-2026-43687

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory...

EUVD-2026-77906

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84549

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84549

CVE-2026-84549 is an out-of-bounds read in the NFS client on macOS, addressed with improved bounds checking. Connecting to a malicious NFS server may cause unexpected system termination or corrupted kernel memory . The NVD assigns a CVSS 3.1 score of 7.5 (High) with a vector of AV:N/AC:L/PR:N/UI:...

CVE-2026-43815

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious afpfs server may lead to kernel memory corruption...

EUVD-2026-77899

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious afpfs server may lead to kernel memory corruption...

CVE-2026-43815

CVE-2026-43815 is a buffer overflow in the afpfs (AFP File System) component of macOS, addressed with improved bounds checking. Connecting to a malicious afpfs server may lead to kernel memory corruption . The vulnerability requires user interaction (connecting to the malicious server) but no spe...

CVE-2026-84509

An out-of-bounds read vulnerability was identified in macOS affecting versions prior to Golden Gate 27 , Sequoia 15.8 , and Tahoe 26.7 . The flaw is caused by insufficient bounds checking and can be triggered by connecting to a malicious SMB server . This vulnerability may result in unexpected sy...

CVE-2026-84509

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...

CVE-2026-84544

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory...

CVE-2026-43677

An out-of-bounds write issue exists in macOS , which can be triggered by connecting to a malicious WebDAV server . This vulnerability can lead to unexpected app termination . The flaw was addressed by removing the vulnerable code, and a fix is available in macOS Golden Gate 27 , macOS Sequoia 15....

EUVD-2026-77861

An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may lead to unexpected app termination...

EUVD-2026-78034

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution...

CVE-2026-65374

A memory corruption issue exists in macOS , specifically affecting versions prior to Golden Gate 27 , Sequoia 15.8 , and Tahoe 26.7 . The vulnerability is caused by insufficient validation and can be triggered by connecting to a malicious WebDAV server , which may lead to remote code execution . ...

CVE-2026-65374

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution...

EUVD-2026-77995

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...

OESA-2026-3822 gvfs security update

Gvfs is a userspace virtual filesystem implementation for GIO a library available in GLib. It comes with a set of backends, including trash support, SFTP, SMB, HTTP, DAV, and many others. Gvfs also contains modules for GIO that implement volume monitors and persistent metadata storage. Security...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server...

Astra Linux – Vulnerability in Firefox

By using XSL Transforms, a malicious webserver could serve a user an XSL document that would continue to execute JavaScript within the bounds of the same-origin policy even after the tab was closed. This vulnerability affects Firefox versions earlier than 97...

Astra Linux – Vulnerability in curl

This flaw allows a malicious HTTP server to set “super cookies” using curl, which are then transmitted back to multiple origins beyond what is allowed or possible. This enables a site to set cookies that are then sent to different and unrelated sites and domains. The attack exploits a flaw in...