An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected process termination or disclose process memory.
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to bypass Gatekeeper checks.
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27. Processing a maliciously crafted image may lead to unexpected app termination.
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files.
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure.
IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further attacks against the systems.
SMTP evasion via incomplete state reset in an Ubuntu-reported component allows an attacker to bypass protocol-level security controls by exploiting improper state machine cleanup between SMTP sessions or command sequences. The vulnerability enables crafted SMTP interactions to carry over state from a prior transaction into a new one, potentially allowing filter evasion, spoofed sender identity acceptance, or bypass of per-message security checks. No CVSS score, CWE, or patch version is currently assigned in NVD, and data is extremely sparse - the analysis below reflects significant inference from the vulnerability class.
CVE-2026-78030 has no publicly available description, CVSS score, CWE classification, or affected version data at time of analysis. The sole intelligence signal is a vendor:ubuntu reporter tag. No meaningful technical characterization of the vulnerability is possible from the provided data.
IPv4/IPv6 hash collision in Suricata's IPPair tracking mechanism causes the engine to reuse state belonging to the wrong IP pair, leading to incorrect stateful evaluation of network traffic. The vulnerability affects deployments where both IPv4 and IPv6 traffic is processed and IPPair-based rules or datasets are active. An attacker who can craft traffic that induces a hash collision may cause Suricata to apply the wrong connection state, potentially bypassing detection rules that depend on per-pair tracking. No public exploit or CISA KEV listing has been identified at time of analysis.
Unquoted LocalSystem service ImagePath in a Windows component distributed by Ubuntu/Canonical enables local privilege escalation to SYSTEM. When a Windows service ImagePath contains spaces and is not enclosed in quotes, the Windows Service Control Manager attempts to resolve the binary by trying each path segment prefix in order - allowing a lower-privileged local attacker who can write to an intermediate directory to place a malicious executable that runs under LocalSystem context on next service start or system reboot. No patch version, CVSS score, or CWE has been assigned in the input data; no public exploit or KEV listing is present at time of analysis.
Unbounded transmit (tx) buffer growth in the Linux kernel's DHCP subsystem can exhaust system memory when traffic is unidirectional. The defect allows the kernel's DHCP-related transmit path to accumulate resources indefinitely - packets or descriptors are enqueued without corresponding release when bidirectional flow acknowledgment is absent. Systems running DHCP client or server functionality via the affected kernel subsystem are exposed to denial-of-service through memory exhaustion. No public exploit has been identified at time of analysis.
NULL pointer dereference in the datasets library (likely HuggingFace datasets or a similar data-processing package) crashes the host process when parsing unexpected or malformed NDJSON (Newline Delimited JSON) files. Any application or pipeline that loads attacker-influenced NDJSON data through the affected library is exposed to a denial-of-service condition. No public exploit has been identified at time of analysis, and no CVSS or CWE data has been assigned yet by NVD.
Buffer over-read in quoted-printable MIME decoding exposes systems that process MIME-encoded content to out-of-bounds memory reads, potentially causing crashes or leaking adjacent heap contents. The vulnerability resides in the quoted-printable decoder of a MIME parsing library, affecting any application that processes untrusted MIME input such as email clients, mail transfer agents, or content-processing pipelines. No public exploit code has been identified at time of analysis, and CVSS scoring data has not yet been published by NVD or the vendor.
Resource exhaustion in an MQTT implementation tracked by Ubuntu allows an attacker to submit an unbounded number of messages within a single transaction, likely leading to memory or CPU exhaustion and denial of service. The affected component, version range, and exact package have not been confirmed from the available data - only Ubuntu's vendor tracking is present. No CVSS score, CWE, EPSS, KEV listing, or patch information was provided, making a full risk assessment impossible at this time.
Heap buffer overflow in SWF (Shockwave Flash) decompression depth handling affects a file analysis engine - most likely ClamAV, based on the 'detect/file_data' module path and Ubuntu as the reporting vendor. An attacker can supply a specially crafted SWF file that, when scanned, triggers out-of-bounds writes on the heap during recursive or depth-tracked decompression, potentially leading to process crash or arbitrary code execution within the scanning daemon. No patch version, CVSS vector, or CWE is included in the input; no public exploit is identified at time of analysis.