CVE-2026-28855

A permissions issue in Apple products allows an application to access protected user data due to insufficient restrictions. This vulnerability affects iOS versions prior to 26.3, iPadOS versions prior to 26.3, and macOS Tahoe versions prior to 26.3. The issue has been addressed with additional re...

CVE-2026-20607

A permissions issue in the libxpc library within macOS operating systems allows an attacker to gain unauthorized access to protected information . The root cause stems from deficiencies in access control , which could allow an app to access sensitive user data. This vulnerability has been address...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS prior to Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 contain security vulnerabilities due to permission issues, which may allow applications to access protected user...

The vulnerability of the MP4Box packaging module of the GPAC multimedia platform, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the MP4Box packaging module of the GPAC multimedia platform is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the MongoDB database management system, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the MongoDB database management system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2026-27526

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4 Description An issue involving insufficient permissions was resolved through the implementation of additional restrictions. An...

The vulnerability of the IBM Planning Analytics Local software, related to the disclosure of information through caching, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM Planning Analytics Local software relates to the disclosure of information through caching. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of CNI Plugins, related to the disclosure of information, allows a malicious actor to gain unauthorized access to the protected information.

The vulnerability of CNI Plugins relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the ability to bypass authentication by using an alternative path or channel. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the mapstructure library in the application software of the “Avora Center” allows a intruder to gain unauthorized access to protected information.

The vulnerability of the mapstructure library in the application software of the “Avora Center” relates to improper processing of output data for registration logs. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the NextCloud Calendar application, a cloud-based software for creating and using NextCloud data storage, stems from improper handling of unexpected data types. This vulnerability allows attackers to compromise the integrity of the protected information.

The vulnerability of the Nextcloud Calendar application, a cloud-based software for creating and managing Nextcloud data storage, is related to improper handling of unexpected data types. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected informatio...

The vulnerability of the amdgpu_atom_execute_table_locked() function in the drivers/gpu/drm/amd/amdgpu/atom.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuatomexecutetablelocked function in the drivers/gpu/drm/amd/amdgpu/atom.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow a remote attacke...

ROS-20260317-73-0031

A vulnerability in the cloneprivatemnt function of the Linux kernel is related to insecure privilege management. Exploitation of the vulnerability allows an intruder to affect the integrity and availability of protected information...

The vulnerability of the visualization plugin for the Grafana-cubism-panel platform, which allows attackers to disclose and modify protected information.

The vulnerability of the visualization plugin for the Grafana Panel platform, which is used for monitoring and observation, relates to the lack of protective measures for the website structure. Exploiting this vulnerability can allow a malicious actor to disclose and modify protected information...

The vulnerability of the OnBeacon() function in the drivers/staging/rtl8723bs/core/rtw_mlme_ext.c module allows unauthorized access to protected information by a remote attacker. This vulnerability enables unauthorized access to sensitive data.

The vulnerability of the OnBeacon function in the drivers/staging/rtl8723bs/core/rtwmlmeext.c module, which supports additional devices in the Linux operating system, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain unauthoriz...

CVE-2025-22444

Exposure of resource to wrong sphere in the UEFI PdaSmm module for some IntelR reference platforms may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...

The vulnerability of the can_follow_write_pte() function (mm/gup.c) and can_follow_write_pmd() function (mm/huge_memory.c) in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the canfollowwritepte function mm/gup.c and canfollowwritepmd function mm/hugememory.c in the Linux kernel is related to improper handling of states during memory management. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality,...

The vulnerability of the recv_done() function in the fs/smb/server/transport_rdma.c module of the SMB server support in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain unauthorized...

The vulnerability of the RDBMS Listener component of the Oracle Database Server management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the RDBMS Listener component of the Oracle Database Server management system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the VMware Workstation hypervisor arises from reading data outside of the permitted range in memory, resulting in unauthorized access to protected information.

The vulnerability of VMware Workstation’s hypervisor is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...