btrfs File System Heap Buffer Overflow DoS

The vulnerability of the functions prelimrelease and findparentnodes in the fs/btrfs/backref.c file from the Btrfs file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition «Infinite loop». Exploiting this vulnerability could allow an...

drivers/gpu/drm/amd/amdkfd/kfd_svm.c Heap Buffer Overflow DoS

The vulnerability of the svmrangevramnodenew function in the drivers/gpu/drm/amd/amdkfd/kfdsvm.c driver for supporting the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems is related to improper initialization. Exploiting this vulnerability can allow an attacke...

netfilter DCCP Error DoS

The vulnerability of the dccperror function in the net/netfilter/nfconntrackprotodccp.c module of the netfilter component in the Linux operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

Mellanox Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the mlx5efsttredirectanycreate function in the drivers/net/ethernet/mellanox/mlx5/core/en/fsttredirect.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended...

Malicious code in @wame/ngx-frf-utilities (npm)

Malicious package due to JS obfuscation, dynamic code execution, OS/DNS access, suspicious install script, and untrustworthy project. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa63e93a0b5a6ead3de9d3680bb75a023c43b59c6db80e0072b6a239cb7d5da The package...

MAL-2026-2412 Malicious code in @wame/ngx-frf-utilities (npm)

Malicious package due to JS obfuscation, dynamic code execution, OS/DNS access, suspicious install script, and untrustworthy project. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa63e93a0b5a6ead3de9d3680bb75a023c43b59c6db80e0072b6a239cb7d5da The package...

MAL-2026-2416 Malicious code in oc-ccp-module-client (npm)

Malware due to hex obfuscation, suspicious install script, dynamic module loading, OS command access, process object access, and untrustworthy project. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2b4b9cee1369c441aa8d759bc04085a8e2b14786df20656a8c6bc249e6260...

PT-2026-27542

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.4 iPadOS versions prior to 26.4 macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4 visionOS versions prior to 26.4 Description A flaw exists in path handling...

PT-2026-27603

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.7 iPadOS versions prior to 18.7.7 macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4 tvOS versions prior to 26.4 visionOS versions prior to 26.4 watchOS...

PT-2026-27529

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.4 Description A flaw exists in how the operating system parses directory paths. This could allow an application to access sensitive user data due to insufficient path validation. Recommendations Update to macOS versi...

PT-2026-27574

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.4 Description A buffer overflow issue was addressed through enhanced size validation. This can lead to memory corruption and unexpected application termination. Recommendations Update to macOS Tahoe 26.4...

PT-2026-27525

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.7 iPadOS versions prior to 18.7.7 iOS version 26.2 iPadOS version 26.2 Description A path handling issue exists due to improved validation. This may allow a user with physical access to bypass Activation Lock. The...

Stable Channel Update for ChromeOS / ChromeOS Flex

The ChromeOS Stable channel is being updated to OS version 16581.42.0 Browser version 146.0.7680.169 for most ChromeOS devices. If you find new issues, please let us know one of the following ways: 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta...

PT-2026-27539

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.4 Description An application could potentially circumvent Gatekeeper security checks due to insufficient permissions restrictions. This issue was resolved by implementing additional restrictions. Recommendation...

PT-2026-27597

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.4 iPadOS versions prior to 26.4 macOS Sequoia versions prior to 15.7.5 macOS Tahoe versions prior to 26.4 visionOS versions prior to 26.4 watchOS versions prior to 26.4 Description An authorization issue existed due to...

PT-2026-27556

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.4 Description An application could potentially access sensitive user data due to insufficient checks. Recommendations Update to macOS Tahoe 26.4 or later...

PT-2026-27553

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.7.5 macOS versions prior to Sonoma 14.8.5 macOS versions prior to Tahoe 26.4 Description An issue involving path handling was addressed through enhanced validation. An application may be capable of deleting...

PT-2026-27589

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 18.7.7 Apple iPadOS versions prior to 18.7.7 Apple iOS versions prior to 26.4 Apple iPadOS versions prior to 26.4 macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions pri...

PT-2026-27536

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.4 iOS versions prior to 18.7.7 iPadOS versions prior to 18.7.7 macOS Tahoe versions prior to 26.4 tvOS versions prior to 26.4 visionOS versions prior to 26.4 watchOS versions prior to 26.4 Description The issue...

Ceph MDS Access Unauthorized Information Disclosure

The vulnerability of the cephmdscheckaccess function in the fs/ceph/mdsclient.c module of the distributed file system support module for Linux operating systems is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to gain unauthorize...