CVE-2026-34486

CVE-2026-34486 affects Apache Tomcat versions 11.0.20, 10.1.53, and 9.0.116, describing Missing Encryption of Sensitive Data due to a fix for CVE-2026-29146 that allowed bypass of the EncryptInterceptor. The connected documents specify the vulnerable component as the EncryptInterceptor path in To...

CVE-2025-31277

CVE-2025-31277 is a memory handling vulnerability in WebKit/WebKitGTK affecting Apple platforms (Safari, iOS, iPadOS, macOS, tvOS, visionOS, watchOS) where processing malicious web content could lead to memory corruption. The issue’s root cause is described as memory handling defects that allow m...

CVE-2025-62230

CVE-2025-62230 affects the X.Org X server family (Xwayland/Xkb handling). The issue is a use-after-free in the Xkb client resource removal path when a client disconnects, caused by improper cleanup of Xkb resources that frees the XkbInterest data but not the associated resource, potentially leadi...

CVE-2025-62231

The CVE-2025-62231 issue is a use-after-free/value overflow in the X.Org X server’s XkbSetCompatMap() that can overflow an unsigned short and cause memory corruption or a crash. Public advisories (ALMAS/ALAS) associate this with the Xorg X11/Xwayland stack and Xorg-server-Xwayland/Xorg components...