CVE-2026-64711

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive user information...

CVE-2026-28911

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process...

CVE-2026-64731

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox...

CVE-2026-43793

CVE-2026-43793 affects macOS environments where improper handling of environment variables could lead to unexpected system termination. Connected sources confirm concrete remediation: Apple has fixed the issue in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The root cause is n...

EUVD-2026-49530

An information leakage was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory...

CVE-2026-43768

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination...

EUVD-2026-49497

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination...

CVE-2026-64734

The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted contact may leak sensitive data...

EUVD-2026-49596

In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdpmasterredirect xdpmasterredirect dereferences the result of netdevmasterupperdevgetrcu without a NULL check, but that helper returns NULL when the receiving device has no upper-master...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.19 Images

Red Hat OpenShift Virtualization release v4.19 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

ROOT-APP-NPM-CVE-2026-42038 CVE-2026-42038 in @rootio/axios - Patched by Root

Root has patched CVE-2026-42038 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a repro. 0 The repro sets up a UDP reuseport group with a cBPF prog and replaces it with a new one while another thread is sending a U...

CVE-2026-64531

CVE-2026-64531 describes a Linux kernel issue in net/openvswitch: generated flow actions stored as nlattrs can exceed the 16-bit nla_len, allowing an oversized container to be closed with a truncated length. The fix preserves large total-action streams but rejects nested action containers that do...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-39827)

In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in roseneigh refcount Current implementation maintains two separate reference counting mechanisms: the 'count' field in struct roseneigh tracks references from rosenode structures, while the 'us...

Fedora 43 : libwebsockets (2026-59fdef3e5f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-59fdef3e5f advisory. Update to 4.5.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Resource Shutdown or Release (CVE-2024-47736)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505618; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

UBUNTU-CVE-2026-64242

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usbinitializegadget installs gadgetrelease as the release callback for the embedded gadget device. The struct net2280 instance is therefore released through gadgetrelease...

Siemens SIMATIC S7-1500 CPU 1518 MFP Missing Release of Resource after Effective Lifetime (CVE-2026-22979)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505709; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2026-51298

Summary of findings (CVE-2026-51298) : Several connected advisories confirm a use-after-free vulnerability in SQLite 3.41 related to the JSON extraction function. The flaw occurs when, after releasing the JsonParse object with jsonParseFree(), the code still accesses internal members of the freed...

Siemens SIMATIC S7-1500 CPU 1518 MFP Missing Release of Resource after Effective Lifetime (CVE-2026-31518)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505622; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...