About the security content of macOS Sequoia 15.7.8

About the security content of macOS Sequoia 15.7.8 This document describes the security content of macOS Sequoia 15.7.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

PT-2026-65238

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description An application may cause unexpected system termination or read kernel memory due to improper memory handling...

PT-2026-65132

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description Connecting to a malicious SMB server may lead to unexpected system termination due to improper memory handling...

Linux Distros Unpatched Vulnerability : CVE-2026-64519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocation findonesbstid skips stids whose scstatus ...

PT-2026-65126

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 watchOS versions prior to 26.6 Description A buffer overflow occurs due to insufficient bounds checking. Connecting to a...

PT-2026-65249

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.6 iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6 Description Websites may be ab...

PT-2026-65169

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description An application may be able to modify protected parts of the file system due to improper handling of symlinks symbolic...

PT-2026-65280

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Tahoe versions prior to 26.6 visionOS versions prior to 26.6 Description An app may cause unexpected system termination or corrupt kernel...

SUSE CVE-2026-11622

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...

SUSE CVE-2026-11721

It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes named to produce a wildcard name for a zone that is shorter than the attacker's zone, which can result in cache poisoning. For...

SUSE CVE-2026-50252

In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions. When resolver load balancing policies depend on the source port while their outcome is revealed this secrecy is undermined...

SUSE CVE-2026-55973

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

...

[SECURITY] Fedora 43 Update: pam-1.7.1-5.fc43

PAM Pluggable Authentication Modules is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication...

Linux Distros Unpatched Vulnerability : CVE-2025-71408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls...

PT-2026-64812

Name of the Vulnerable Software and Affected Versions NoteGen versions prior to 0.32.0 Description NoteGen grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. This allows JavaScript running in the...

GHSA-R292-9MHP-454M vulnerabilities

Vulnerabilities for packages: code-server, prism, gemini-cli, node-gyp, sqlpad, haraka, kibana, graalvm, lerna, renovate, gitlab-rails-ce, opensearch-dashboards-fips, kubeflow-centraldashboard, actions-runner, npm, pulumi, opensearch-dashboards...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: tetragon, istio, rancher, kots, vcluster, kube-vip-cloud-provider, spqr, keda, flux-kustomize-controller, fluent-operator, metallb, azure-service-operator, telegraf, cert-manager, cass-operator, kube-metrics-adapter, rancher-system-agent, flux-helm-controller,...

MINI-7JX6-3X26-CMCP

Bulletin has no description...

SUSE CVE-2026-64265

In the Linux kernel, the following vulnerability has been resolved: fuse: clear intrentry in fuseresend and fuseremovependingreq When fuseresend moves a request from fpq-processing back to fiq-pending, it sets FRPENDING and clears FRSENT but does not remove the requests intrentry from...