CVE-2026-120407

The Contact Form 7 WordPress plugin (versions before 6.2.5 ) contains a vulnerability where form field default values do not restrict which user properties they can be populated from. This flaw allows users with the Editor role or higher to access sensitive information, such as password hashes an...

WordPress Contact Form 7 plugin < 6.2.5 - Editor+ Sensitive User Data Disclosure vulnerability

Editor+ Sensitive User Data Disclosure vulnerability discovered by Epihack Bénin in WordPress Plugin Contact Form 7 versions 6.2.5...

CLEANSTART-2024-GD40306 malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data

CVE-2023-5725 affects multiple packages. A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data. See references for individual vulnerability details...

CVE-2026-112602

An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data...

CVE-2026-112602

An authorization issue exists in Xcode versions prior to 27.2 due to improper state management. This vulnerability could allow an application to access sensitive user data . The issue was addressed in Xcode 27.2 , and it is recommended to update to this version to remediate the risk. Exploitation...

CVE-2026-112602

An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data...

EUVD-2026-113445

An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data...

CVE-2026-112602: Apple Xcode: An authorization issue was addressed with improved state management

An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data...

PT-2026-132864

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 27.2 Description An authorization issue exists due to improper state management, which could allow an application to access sensitive user data. Recommendations Update to Xcode version 27.2...

About the security content of Xcode 27.2

Download JSON About the security content of Xcode 27.2 This document describes the security content of Xcode 27.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

CVE-2026-86987

An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access sensitive user data...

CVE-2026-86978

This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An app may be able to access sensitive user data...

CVE-2026-86931

A privacy issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data...

CVE-2026-86923

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data...

CVE-2026-86880

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data...

CVE-2026-84594

A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data...

CVE-2026-113914

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data...

CVE-2026-113908

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data...

CVE-2026-113896

A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data...

CVE-2026-112701

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data...