Apple多款产品 安全漏洞

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...

Apple多款产品 安全漏洞

Apple Safari, among others, are products of the American company Apple. Apple Safari is a web browser that is the default browser included with the Mac OS X and iOS operating systems. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad...

The vulnerability of the svm_range_vram_node_new() function in the drivers/gpu/drm/amd/amdkfd/kfd_svm.c driver module allows a hacker to trigger a service failure. This vulnerability targets AMD GPU-based Linux operating system graphics cards with Direct Rendering Infrastructure (DRI) support.

The vulnerability of the svmrangevramnodenew function in the drivers/gpu/drm/amd/amdkfd/kfdsvm.c driver for supporting the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems is related to improper initialization. Exploiting this vulnerability can allow an attacke...

The vulnerability of the smu_v12_0_fini_smc_tables() function in the drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c driver module allows a attacker to cause a service failure in AMD Linux-based graphics cards with Direct Rendering Infrastructure support.

The vulnerability of the smuv120finismctables function in the drivers/gpu/drm/amd/pm/swsmu/smu12/smuv120.c driver module is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Vulnerabilities exist in versions of Apple macOS such as Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4. These vulnerabilities stem from permission issues, which may allow applications to modif...

The vulnerabilities in the functions prelim_release() and find_parent_nodes() of the fs/btrfs/backref.c module in the btrfs file system of the Linux operating system allow a attacker to cause a service failure.

The vulnerability of the functions prelimrelease and findparentnodes in the fs/btrfs/backref.c file from the Btrfs file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition «Infinite loop». Exploiting this vulnerability could allow an...

The vulnerability of the ena_init() function in the drivers/net/ethernet/amazon/ena/ena_netdev.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the enainit function in the drivers/net/ethernet/amazon/ena/enanetdev.c file of the Ethernet network adapter driver for the Linux operating system exposes confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...

MAL-2026-2412 Malicious code in @wame/ngx-frf-utilities (npm)

Malicious package due to JS obfuscation, dynamic code execution, OS/DNS access, suspicious install script, and untrustworthy project. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa63e93a0b5a6ead3de9d3680bb75a023c43b59c6db80e0072b6a239cb7d5da The package...

Malicious code in @wame/ngx-frf-utilities (npm)

Malicious package due to JS obfuscation, dynamic code execution, OS/DNS access, suspicious install script, and untrustworthy project. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa63e93a0b5a6ead3de9d3680bb75a023c43b59c6db80e0072b6a239cb7d5da The package...

MAL-2026-2416 Malicious code in oc-ccp-module-client (npm)

Malware due to hex obfuscation, suspicious install script, dynamic module loading, OS command access, process object access, and untrustworthy project. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2b4b9cee1369c441aa8d759bc04085a8e2b14786df20656a8c6bc249e6260...

PT-2026-27525

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.7 iPadOS versions prior to 18.7.7 iOS version 26.2 iPadOS version 26.2 Description A path handling issue exists due to improved validation. This may allow a user with physical access to bypass Activation Lock. The...

PT-2026-27529

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.4 Description A flaw exists in how the operating system parses directory paths. This could allow an application to access sensitive user data due to insufficient path validation. Recommendations Update to macOS versi...

PT-2026-27603

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.7 iPadOS versions prior to 18.7.7 macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4 tvOS versions prior to 26.4 visionOS versions prior to 26.4 watchOS...

PT-2026-27556

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.4 Description An application could potentially access sensitive user data due to insufficient checks. Recommendations Update to macOS Tahoe 26.4 or later...

PT-2026-27539

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.4 Description An application could potentially circumvent Gatekeeper security checks due to insufficient permissions restrictions. This issue was resolved by implementing additional restrictions. Recommendation...

Mozilla Firefox < 149.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 149.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-20 advisory. - Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability affects Firefox...

The vulnerability of the IBM i operating system, which involves unlimited distribution of resources, allows a hacker to trigger a service failure.

The vulnerability of the IBM i operating system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the __tm_recheckpoint function in the arch/powerpc/kernel/tm.S module of the PowerPC platform supports the Linux operating system’s kernel. This allows a hacker to trigger a system failure.

The vulnerability of the tmrecheckpoint function in the arch/powerpc/kernel/tm.S module of the PowerPC platform supporting Linux operating systems is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ceph_mds_check_access() function in the fs/ceph/mds_client.c module, a part of the distributed file system Ceph support for Linux operating systems, allows a attacker to gain unauthorized access to protected information.

The vulnerability of the cephmdscheckaccess function in the fs/ceph/mdsclient.c module of the distributed file system support module for Linux operating systems is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to gain unauthorize...

PT-2026-27553

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.7.5 macOS versions prior to Sonoma 14.8.5 macOS versions prior to Tahoe 26.4 Description An issue involving path handling was addressed through enhanced validation. An application may be capable of deleting...