Apple iOS security vulnerabilities

Security vulnerabilities exist in Apple iOS versions prior to 26.7 and 27.2, Apple iPadOS versions prior to 26.7 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe versions prior to 26.7.2, Apple tvOS versions prior to 27.2, a...

Open Neural Network Exchange ONNX resource management error vulnerability

Versions of Open Neural Network Exchange ONNX prior to 1.22.0 contain a resource management error vulnerability. This vulnerability arises because unpack2bit and unpack4bit fail to verify the number of elements encoded in rawdata or int32data when adjusting the size of the unpacked array. When...

PT-2026-123436

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.32.0 Description The Phi-4 multimodal audio encoder in phi4mm audio.py and phi4mm utils.py uses eager attention by default. This allows a remote client to submit a long audio clip that triggers the...

vLLM resource management error vulnerability

Versions vLLM 0.19.0 through 0.32.0 contain a resource management error vulnerability. This vulnerability arises because authenticated callers can provide chat template requests when no server-side --chat-template is configured; alternatively, malicious model repositories may supply templates...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple tvOS versions prior to 27.2, Apple visionOS versions prior to 27.2, and Apple watchOS versions prior to 27.2. This vulnerability stems fr...

PT-2026-132748

vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can supply a request chat template when no server-side --chat-template is configured, or a malicious model repository can provide a template that is compiled and rendered by...

PT-2026-125368

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

PT-2026-125488

VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long lines. Attackers can send a crafted uuencode or x-uuencode MIME part with a large line length byte to leak up to 15 bytes...

Google Chrome Microsoft Edge DoS

The DOM component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploiting this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

PT-2026-123300

Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/1.1 chunked body reader of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory and CPU via a request body made of many 1-byte chunks. The chunked reader in lib/bandit/http1/socket.ex keeps...

CentOS Linux 7 [TuxCare] Security Update: dovecot / dovecot-devel / dovecot-mysql / dovecot-pgsql / etc (CENTOS7:CLSA-2026:1792764059)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792764059 advisory. - An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing cod...

Linux Distros Unpatched Vulnerability : CVE-2026-116154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where allocated memory is not released when parsing reaches...

RHEL 9 : webkit2gtk3 (RHSA-2026:89821)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89821 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: skia:...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS versions prior to Golden Gate 27.2, macOS Sequoia prior to 15.8.2, and macOS Tahoe prior to 26.7.2. This vulnerability stems from improper boundary checks and may lead to out-of-bounds writes. Remote attackers could exploit this to cause the...

Linux Distros Unpatched Vulnerability : CVE-2026-115824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. The chunked body decoder keeps each chunk in...

PT-2026-125249

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption...

PT-2026-125449

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted audio file may lead to memory corrupti...

PT-2026-125447

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may...

Apple MacOS: CVE-2026-86970: OS X update for FontParser

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may...