CVE-2026-43821

CVE-2026-43821 pertains to an access issue in Apple Safari/WebKit where an app may read files outside its sandbox. The vulnerability is addressed in Safari 26.6 and corresponding OS updates (iOS/iPadOS/macOS Tahoe 26.6, tvOS, visionOS, watchOS 26.6). The NVD/NCSC entries describe improved access ...

CVE-2026-34430

CVE-2026-34430 affects ByteDance DeerFlow versions before commit 92c7a20. A sandbox escape exists in the bash tool handling, allowing an attacker to bypass regex-based validation via shell features (e.g., directory changes, relative paths) and exploit incomplete shell semantics modeling to read/m...