EUVD-2026-15121

An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.4. An app may be able to access protected user data...

CVE-2026-28855

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3. An app may be able to access protected user data...

CVE-2026-28845

An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.4. An app may be able to access protected user data...

CVE-2026-20607

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access protected user data...

CVE-2026-28845

An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.4. An app may be able to access protected user data...

CVE-2026-28855

A permissions issue in Apple products allows an application to access protected user data due to insufficient restrictions. This vulnerability affects iOS versions prior to 26.3, iPadOS versions prior to 26.3, and macOS Tahoe versions prior to 26.3. The issue is resolved in versions 26.3 for all ...

CVE-2026-20607

A permissions issue in macOS (specifically versions Sequoia 15.7.5 , Sonoma 14.8.5 , and Tahoe 26.4 ) allows an application to potentially access protected user data due to deficiencies in access control. The vulnerability is related to the libxpc library. This issue has been addressed by impleme...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS prior to Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 contain security vulnerabilities due to permission issues, which may allow applications to access protected user...

The vulnerability of the MongoDB database management system, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the MongoDB database management system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the MP4Box packaging module of the GPAC multimedia platform, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the MP4Box packaging module of the GPAC multimedia platform is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

PT-2026-27526

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4 Description An issue involving insufficient permissions was resolved through the implementation of additional restrictions. An...

The vulnerability of the IBM Planning Analytics Local software, related to the disclosure of information through caching, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM Planning Analytics Local software relates to the disclosure of information through caching. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of CNI Plugins, related to the disclosure of information, allows a malicious actor to gain unauthorized access to the protected information.

The vulnerability of CNI Plugins relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the mapstructure library in the application software of the “Avora Center” allows a intruder to gain unauthorized access to protected information.

The vulnerability of the mapstructure library in the application software of the “Avora Center” relates to improper processing of output data for registration logs. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the ability to bypass authentication by using an alternative path or channel. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the NextCloud Calendar application, a cloud-based software for creating and using NextCloud data storage, stems from improper handling of unexpected data types. This vulnerability allows attackers to compromise the integrity of the protected information.

The vulnerability of the Nextcloud Calendar application, a cloud-based software for creating and managing Nextcloud data storage, is related to improper handling of unexpected data types. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected informatio...

The vulnerability of the amdgpu_atom_execute_table_locked() function in the drivers/gpu/drm/amd/amdgpu/atom.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuatomexecutetablelocked function in the drivers/gpu/drm/amd/amdgpu/atom.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow a remote attacke...

ROS-20260317-73-0031

A vulnerability in the cloneprivatemnt function of the Linux kernel is related to insecure privilege management. Exploitation of the vulnerability allows an intruder to affect the integrity and availability of protected information...

The vulnerability of the visualization plugin for the Grafana-cubism-panel platform, which allows attackers to disclose and modify protected information.

The vulnerability of the visualization plugin for the Grafana Panel platform, which is used for monitoring and observation, relates to the lack of protective measures for the website structure. Exploiting this vulnerability can allow a malicious actor to disclose and modify protected information...

The vulnerability of the OnBeacon() function in the drivers/staging/rtl8723bs/core/rtw_mlme_ext.c module allows unauthorized access to protected information by a remote attacker. This vulnerability enables unauthorized access to sensitive data.

The vulnerability of the OnBeacon function in the drivers/staging/rtl8723bs/core/rtwmlmeext.c module, which supports additional devices in the Linux operating system, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain unauthoriz...