CVE-2026-43714

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. A malicious app may be able to access protected user data...

CVE-2026-43775

CVE-2026-43775 is an authorization issue in macOS components that was addressed by improved state management. Affected products include macOS Sequoia 15.7.8 and macOS Tahoe 26.6, where an app may potentially access sensitive user data due to the underlying flaw. The public documents confirm the f...

CVE-2026-64742

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-43759

An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-64755

CVE-2026-64755 affects Apple iOS and iPadOS. The issue is described as an authorization problem tied to improved state management that could allow an app to access sensitive user data. The vulnerability is mitigated by updates to iOS 26.6 and iPadOS 26.6. The connected documents corroborate this ...

CVE-2026-43758

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-64743

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-64743

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-64743

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-43774

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data...

CVE-2026-43781

CVE-2026-43781 is a race-condition vulnerability in macOS Sequoia 15.7.8 and related updates (Sonoma 14.8.8, Tahoe 26.6) affecting the Apple Account area. The issue is described as a race condition addressed with improved state handling, with the impact that an app may be able to gain root privil...

PT-2026-65166

Name of the Vulnerable Software and Affected Versions macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description An access issue exists where an application may be able to access user-sensitive data. This is addressed by implementing improved access restrictions...

PT-2026-65275

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6 Description An authorization issue exists due to improper...

PT-2026-65185

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A race condition exists due to improper state handling, which could allow an application to access sensitive user data....

PT-2026-65164

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.8 macOS versions prior to 14.8.8 macOS versions prior to 26.6 watchOS versions prior to 26.6 Description An authorization issue exists due to improper state management, which could allow an application to access...

PT-2026-65186

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description An application may be able to access sensitive user data due to insufficient checks. Recommendations Update macOS Sequo...

PT-2026-65193

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versio...

PT-2026-65283

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 Description An authorization issue exists due to improper state management, which could allow an application to access sensitive user data. Recommendations Update iOS to version 26.6...

Budibase: Unauthenticated user information disclosure via public tenant user lookup endpoint

Summary The Budibase Worker service exposes a public, unauthenticated API endpoint GET /api/global/users/tenant/:id that returns sensitive user information including tenantId, userId, email, and ssoId. The endpoint is registered in the PUBLICENDPOINTS list with a TODO comment acknowledging it...

CVE-2026-17059

A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when listing members of...