Apple MacOS: CVE-2026-84545: OS X update for CUPS

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app with App Sandbox restrictions may be able to escape the sandbox and execute code with root privileges...

PT-2026-125281

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution...

Apple Security Advisory 10-26-2026-2

Apple Security Advisory 10-26-2026-2 - iOS 26.7.2 and iPadOS 26.7.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, memory corruption, buffer overflow, integer overflow, and information disclosure vulnerabilities...

Apple Security Advisory 10-26-2026-7

Apple Security Advisory 10-26-2026-7 - tvOS 27.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, buffer overflow, integer overflow, and information disclosure vulnerabilities...

Apple Security Advisory 10-26-2026-10

Apple Security Advisory 10-26-2026-10 - Safari 27.2 addresses out of bounds read, out of bounds write, and use-after-free vulnerabilities...

Apple MacOS: CVE-2026-112516: OS X update for Kernel

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected...

PT-2026-125396

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected...

PT-2026-125234

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges...

PT-2026-123393

Name of the Vulnerable Software and Affected Versions netty-tcnative versions 2.0.66.Final through 2.0.83.Final Description When built against OpenSSL 3.x, a use-after-free issue occurs during session ticket key rotation. This happens when remote clients perform TLS handshakes while the...

CentOS Linux 7 [TuxCare] Security Update: dovecot / dovecot-devel / dovecot-mysql / dovecot-pgsql / etc (CENTOS7:CLSA-2026:1792764059)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792764059 advisory. - An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing cod...

Apple MacOS: CVE-2026-112514: OS X update for Kernel

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker may be able to cause unexpecte...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.5. It arises because the V3D unbind process fails to clear suspend check timers and work queues; this may allow reading V3D registers via an empty vc4-v3d pointer, leading to null pointer dereferencing and use-after-free conditions...

CentOS Linux 7 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / nginx-mod-devel / etc (CENTOS7:CLSA-2026:1792768772)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792768772 advisory. - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpssimodule module. This vulnerability may exist when the Server-Side Include...

Google Chrome Microsoft Edge DoS

The vulnerability in the Views component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory usage. Exploitation of this vulnerability may allow an attacker to trigger a denial of service via a malicious file...

FreeBSD : ImageMagick7 -- multiple vulnerabilities (fc4d0a5b-d0c6-11f1-bae2-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fc4d0a5b-d0c6-11f1-bae2-3497f65b111b advisory. The ImageMagick project published security advisories for issues fixed in releases 7.1.2-26...

Linux Distros Unpatched Vulnerability : CVE-2026-99095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vc4: drain the hangcheck timer and works on V3D unbind Nothing stops the hangcheck timer that submitted jobs arm, or the jobdonework that the render-done...

AlmaLinux 10 : thunderbird (ALSA-2026:80674)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:80674 advisory. firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component CVE-2026-100832 firefox: Use-after-free in the Layout: Text and Fonts component...

Translate Component DoS

The vulnerability in the Translate component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory usage. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

RockyLinux 8 : kernel (RLSA-2026:89083)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89083 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel:...

RHEL 9 : libxml2 (RHSA-2026:90309)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90309 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: mingw-libxml2:...