CVE-2026-86959

An input validation issue in various Apple operating systems can lead to unexpected process termination when processing a maliciously crafted image . This vulnerability is addressed in iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 ....

CVE-2026-86959

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to unexpected process termination...

EUVD-2026-104713

An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination...

CVE-2026-86875

An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination...

CVE-2026-86875

The CoreSymbolication component within Xcode 27 (available for macOS Tahoe 26.6 and later) is affected by an input validation issue . A vulnerability in how the component parses data allows a maliciously crafted binary to cause unexpected app termination . This issue has been addressed in Xcode 2...

CVE-2026-84508

The vulnerability in Apple software allows an application to potentially access protected user data due to insufficient validation of the caller's access. This issue affects iOS 27 , iPadOS 27 , visionOS 27 , macOS Golden Gate 27 , and macOS Tahoe 26.7 . Remediation is provided via security updat...

CVE-2026-84508

This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data...

EUVD-2026-104704

This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data...

PT-2026-119025

Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-118720

Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

Google Chrome Vulnerability: CVE-2026-113012

Improper input validation in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Ubuntu: USN-8927-1 (CVE-2026-87865): curl vulnerabilities

When libcurl uses libssh2 with a hashed knownhosts file, an unrelated initial entry can cause host key validation to report a key mismatch as a missing key to the CURLOPTSSHKEYFUNCTION callback...

JFrog Artifactory < 7.111.18 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is affected by multiple vulnerabilities: - A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and...

PT-2026-120135

IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input...

Google Chrome Vulnerability: CVE-2026-113099

Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Google Chrome Vulnerability: CVE-2026-113060

Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Google Chrome Vulnerability: CVE-2026-113316

Improper input validation in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-113120

Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-118872

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in the FileSystem component allows a remote attacker to execute arbitrary code within the sandbox by inducing a user to visit a specially crafted HTML page...

Google Chrome Vulnerability: CVE-2026-113162

Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...