Open redirect in Apache Syncope's SRA (Secure Remote Access) component allows unauthenticated network attackers to redirect authenticated users to attacker-controlled URLs during CAS SSO login flows. The vulnerability arises because Syncope SRA unconditionally trusts client-supplied forwarded HTTP headers (e.g. X-Forwarded-Host, X-Forwarded-Proto) when constructing the target Apereo CAS instance URL, enabling header-injection-based phishing attacks that can harvest credentials. Exploitation requires user interaction and the CAS authentication configuration to be active; no public exploit or active exploitation has been identified at time of analysis.
Cross-site scripting in Apache Syncope's Console and Enduser login pages allows unsanitized HTML and JavaScript to be rendered via a maliciously crafted notification message link. Versions 4.0.4 through 4.0.7 and 4.1.0-M0 through 4.1.2 are affected. An attacker who can deliver a crafted HTTP link to a Syncope user can execute arbitrary JavaScript in that user's browser upon visiting the login page, enabling session hijacking, credential theft, or UI redress attacks.
Denial-of-service in Gitlawb openclaude (all versions up to 0.30.0) arises from improper resource handling in the `waitForCallback` function of the xAI OAuth Callback Handler (`src/services/api/xaiOAuthCallback.ts`), where a manipulated Error argument causes availability degradation. The attack is network-reachable but requires user interaction (CVSS 4.0 UI:P), resulting in a low availability impact with no confidentiality or integrity consequences. A publicly available proof-of-concept exists as GitHub issue #2101; the vendor has been notified but has not yet responded to the disclosure.
Stored cross-site scripting in SourceCodester Inventory Management System 1.0 allows an authenticated remote attacker to inject malicious scripts via the Product_Name parameter handled by /api/products_handler.php in the Product Management Module. When other authenticated users subsequently view affected product listings, the injected payload executes in their browsers, enabling session hijacking, credential theft, or UI redressing. A public proof-of-concept exploit is available on GitHub, lowering the bar for exploitation by non-expert attackers.
Cross-site scripting in SourceCodester Inventory Management System 1.0 allows authenticated remote attackers to inject and execute arbitrary client-side scripts via the `/api/vendors_handler.php` Vendor Management endpoint. A public proof-of-concept exploit has been published on GitHub (gist by fhewm98), confirming the issue is reproducible. Exploitation requires low-privilege authentication and victim interaction, limiting blast radius, but successful attacks can hijack sessions, redirect users, or perform unauthorized actions on behalf of the victim.
Reflected or stored cross-site scripting in SourceCodester Inventory Management System 1.0 allows an authenticated remote attacker to inject malicious JavaScript via the Customer_Name parameter in the Customer Management Module's /api/customers_handler.php endpoint. When a second user (such as an administrator) loads the affected customer record, the payload executes in their browser, enabling session hijacking or unauthorized actions on their behalf. A public proof-of-concept exploit is available on GitHub; no active exploitation (KEV) has been confirmed.
A time-of-check to time-of-use (TOCTOU) race condition in IBM i releases 7.3, 7.4, 7.5, and 7.6 lets a local attacker win a race window during a privileged file-ownership operation and end up owning arbitrary file system objects on the system. Successful exploitation yields low-level confidentiality, integrity, and availability impact but crosses a security boundary (CVSS scope change), meaning objects outside the attacker's own authority can be reassigned. No public exploit code or CISA KEV entry was identified at time of analysis, and no EPSS score was supplied; the CVSS base score is 6.0.
Race condition in Yealink SIP-T33G firmware versions 124.86.x.x allows authenticated network users to abort active diagnostic operations by exploiting unsynchronized access to predictable output file paths. An attacker with low-level device credentials triggers a diagnostic tool such as ping or traceroute, then concurrently invokes the file deletion endpoint to remove the output file while it is being written, interrupting the running process and leaving the device in an inconsistent state. No public exploit has been identified and no active exploitation is recorded; the vendor has released a fix in firmware 124.87.0.0.
Remote code execution in Yot CMS 3.3.0 and 3.3.1 is achievable by an authenticated administrator through the Admin Console's unsanitized use of PHP's eval() function in modsys/console/admin.php, where the text POST parameter is passed directly to eval() without validation. A publicly available proof-of-concept on GitHub demonstrates the attack. Despite the technically accurate RCE classification, exploitation is gated behind high-privilege (administrator) authentication, substantially reducing practical risk compared to the tag alone suggests.
OS command injection in D-Link DWR-M921 firmware 1.1.52 exposes the router to remote arbitrary command execution via the WPS configuration endpoint. The `targetAPSsid` parameter passed to `/boafrm/formWsc` is not sanitized before being incorporated into a system-level command within the Boa embedded web server, allowing an authenticated administrator to execute arbitrary OS commands on the underlying embedded Linux system. A public proof-of-concept exploit authored by H3rmesk1t is available on GitHub, lowering the barrier for abuse significantly. No active KEV listing is present at time of analysis.
An authentication bypass in IBM WebSphere Application Server 8.5 and 9.0 allows remote attackers to reach protected resources without valid credentials when the XD or Intelligent-Management features are in use. Successful exploitation yields unauthorized access to confidential data (C:H) with no direct integrity or availability impact, consistent with the CWE-650 (trusting HTTP permission methods) classification. IBM has published an advisory and patch (node/7286610); no public exploit code or CISA KEV listing was present in the supplied intelligence, so active exploitation is unconfirmed.
A stack-based buffer overflow exists in GPAC 26.07.0 within the scene-graph DOM event handler gf_sg_dom_event_bubble (src/scenegraph/dom_events.c), reachable through the MP4Box tooling when it parses a crafted scene/BT/XMT media file. Exploitation is local only — the attacker must get a file processed by an affected build — and the disclosed impact is loss of availability rather than code execution or data disclosure. Publicly available exploit code exists (a PoC archive is linked from the advisory), but EPSS is only 0.17% (7th percentile), there is no CISA KEV listing, and the SSVC decision is exploitation=poc, automatable=no, technical impact=partial, so this is a low-priority, local, denial-of-service-class memory-safety bug rather than an urgent remote threat.
An integer-overflow flaw (CWE-190) in Apple macOS lets an attacker who already occupies a privileged on-path network position crash or otherwise deny service to the affected system. The vulnerability is fixed in macOS Golden Gate 27, macOS Tahoe 26.7 and macOS Sequoia 15.8, so every earlier build of those three branches is exposed. There is no CISA KEV listing and no identified public exploit code, and EPSS places exploitation likelihood at roughly 0.17% (6th percentile), making this a routine patch-cycle item rather than an emergency for most fleets.
Use-after-free in GPAC 26.07.0's MP4Box component allows a local user to crash the application by supplying a crafted MP4 file containing a malformed BIFS scene graph. The flaw resides in gf_node_deactivate_ex() within scenegraph/base_scenegraph.c, where a scenegraph node with a zero instance count could be dereferenced after release because an assertion (gf_assert) was used instead of a guarded early return. A public POC exploit exists; impact is limited strictly to availability (application crash) with no confidentiality or integrity consequence.
Use-after-free in GPAC 26.07.0's MP4Box scenegraph engine allows a local low-privileged user to crash the application by processing a crafted scene file. The vulnerability exists in gf_node_unregister() within scenegraph/base_scenegraph.c, triggered when proto default field nodes (SFNODE/MFNODE typed) are not properly unregistered before scenegraph teardown, leaving dangling pointers subsequently dereferenced. A public proof-of-concept exploit (poc_09_add.zip) is available, though exploitation is limited to local availability impact with no confirmed active exploitation. No special privileges beyond running MP4Box are required.
Null pointer dereference in GNU libredwg 0.13.4's Layer table encoding function allows a local attacker to crash any application built on the library by supplying a DWG file whose LAYER entity has no material handle assigned. The root cause is commit 27118c40 (
Arista EOS devices simultaneously running 802.1X port authentication and the RADIUS proxy feature with dynamic authorization can be manipulated by a low-privileged adjacent attacker to suppress RADIUS Change-of-Authorization (CoA) and Disconnect-Request messages targeting locally authenticated 802.1X sessions. By inducing a crafted RADIUS packet through a configured RADIUS proxy client interface, an attacker causes the switch to discard legitimate session-revocation orders from a RADIUS server or NAC system, allowing revoked endpoint sessions to persist on the network indefinitely. Arista discovered this issue internally and reports no known malicious exploitation in customer environments; no public exploit code exists at time of analysis.
A race condition in Apple macOS state management allows a locally executing application to read sensitive user data; the flaw is fixed in macOS Golden Gate 27, and all earlier macOS versions are affected. Exploitation requires an attacker-controlled or malicious app already running on the host (assessed as local, PR:L, not remote despite the vendor's AV:N/PR:N vector) and depends on winning a narrow timing window, which limits reliability. Impact is confidentiality-only - no integrity or availability effect - and no public exploit has been identified at time of analysis; EPSS is 0.14% (4th percentile), so opportunistic exploitation is unlikely, though the data-disclosure impact and Apple's ecosystem prominence keep patching worthwhile.
Heap-based buffer overflow in jhead up to 3.3 allows a local attacker with low privileges to corrupt process memory by supplying a crafted WebP image with malformed GPS EXIF tags (TAG_GPS_LAT or TAG_GPS_LONG) to the ProcessGpsInfo() function in gpsinfo.c. A proof-of-concept has been publicly released via GitHub, and the project maintainer has not responded to the responsible disclosure report. No vendor-released patch is available at time of analysis.
Denial of service in GPAC MP4Box (up to commit f1219cde) triggers a process abort via an unconditional reachable assertion (`gf_assert(0)`) inside `xmt_parse_element` in `scene_manager/loader_xmt.c` when parsing a crafted XMT scene file. Local, low-privilege users can crash the process by feeding malformed input to the MP4Box command-line tool; no code execution or data leakage is possible. A public proof-of-concept is documented and the vendor has released a fix in version abi-16.23.
Reachable assertion in GPAC MP4Box's scenegraph node unregistration function allows a local attacker to crash the application by supplying a crafted MP4 file. The vulnerability exists in `gf_node_unregister()` within `scenegraph/base_scenegraph.c`, where a hard `gf_assert(pNode->sgprivate->num_instances)` fires when processing scene graph structures with zero instance counts - a state reachable through malformed MPEG-4 BIFS scene data. No confidentiality or integrity impact exists; impact is limited to availability of the MP4Box process. A public proof-of-concept and a vendor-released patch are both available.
GPAC's MP4Box media packager crashes on a crafted MP4 file due to a reachable assertion in stbl_GetSampleInfos() (src/isomedia/stbl_read.c), which fires when a malformed sample-to-chunk table causes firstSampleInCurrentChunk to exceed the current sampleNumber. All GPAC releases up to commit f1219cde are affected. A public exploit writeup exists; however, exploitation is limited to local denial-of-service-crashing the MP4Box process-with no confidentiality or integrity impact. The vendor has released a patch in tag abi-16.23 replacing the bare gf_assert with a graceful error-return path.
Reachable assertion in GPAC's MP4Box tool (up to commit f1219cde) causes process abort when processing a crafted MPEG-4 scene file: `gf_sm_dump_command_list()` in `scene_manager/scene_dump.c` fires `gf_assert(!sdump->current_com_list)` if the command-list pointer is already populated at dump time, crashing MP4Box. A local attacker with standard user privileges who can supply input to the MP4Box binary can trigger this denial of service. No public exploit confirmed in CISA KEV, but a publicly available proof-of-concept exists; vendor-released patch abi-16.23 is available.
Heap buffer over-read in GPAC's MP4Box component allows a local attacker to crash the process by supplying a crafted media file with malformed SVG attributes. The flaw resides in `gf_svg_attributes_copy` (scenegraph/svg_attributes.c) and manifests when MP4Box parses SVG attribute data without adequate bounds enforcement. A publicly available proof-of-concept exists; no active exploitation has been confirmed. The impact is limited to availability - denial of service via process crash - with no confidentiality or integrity consequence.
Null pointer dereference in GPAC MP4Box up to commit f1219cde causes a local denial-of-service when processing crafted VRML/MPEG-4 scenegraph content via the MP4Box tool. The crash originates in scenegraph/vrml_tools.c, specifically in the cyclic traversal flag logic where a node pointer is dereferenced without a NULL guard. A publicly available proof-of-concept exploit exists, and the patch was merged in release abi-16.23. No public exploitation activity (KEV) has been observed; this is a low-severity, locally-exploitable tool crash with no confidentiality or integrity impact.
A null pointer dereference in the bfd_putl64() function of GNU Binutils 2.47 (bfd/libbfd.c), reachable through the ld linker component, lets a local user crash the tool by feeding it a malformed ELF file. Publicly available exploit code exists (a GitHub write-up demonstrating a SEGV), and the upstream project was notified via a Sourceware bug report but has not responded, so no fixed release has been published. Severity is low (CVSS 4.0 base 1.9) because exploitation requires local access, yields no confidentiality impact, and is limited to integrity/availability loss of the linking process.
Out-of-bounds read in jhead's EXIF parser crashes the application when processing a crafted JPEG file. The Get16u() function in exif.c - which reads 16-bit unsigned integers from EXIF data - fails to validate buffer bounds, allowing a malicious JPEG to trigger a read past the end of an allocated buffer. All versions up to and including 3.3 are affected; the vendor has not responded to the coordinated disclosure, and no patch is available. A public proof-of-concept exploit exists, though exploitation is constrained to local access and causes only a low-severity availability impact (crash/DoS), not code execution or data exfiltration.
A use-after-free and double-free race in Zephyr's TLS socket session cache lets a malicious or compromised TLS peer corrupt the mbedTLS heap and crash an affected device. The flaw is reachable only by applications that explicitly enable the TLS_SESSION_CACHE socket option (off by default) and run concurrent TLS client connections from multiple threads, since the process-global client_cache defaults to a single shared slot. A vendor fix exists in commit 7f9d8ee (shipping in Zephyr 4.4.2 per the EUVD version range), and no public exploit code or active exploitation has been identified.
A local information-disclosure weakness in cosmicstack-labs mercury-agent through version 1.2.0 lets a low-privileged local user manipulate the Shell Permission Manifest so that PermissionManager.checkShellCommand in mercury-agent/src/capabilities/permissions.ts mis-evaluates which shell commands are permitted. Successful abuse exposes sensitive data readable through the agent's shell capability, though integrity and availability are unaffected. Public exploit code exists (linked issue report) and the vendor has not yet responded, but exploitation is limited to hosts already running the agent and requires local access, giving a very low CVSS 4.0 base score of 1.9.
A heap out-of-bounds read/write leading to a buffer overflow exists in the GNU linker (ld), part of GNU Binutils 2.47, inside the elf_x86_64_relocate_section() function of bfd/elf64-x86-64.c, triggered when the linker processes a malformed x86-64 relocation entry whose roff argument is not validated. Exploitation is local — an attacker must supply a crafted ELF object file to a link operation — and yields only limited confidentiality, integrity and availability impact (CVSS 4.0 base 1.9), but publicly available exploit code exists and a heap OOB write/SEGV proof-of-concept has been published. The flaw is fixed in Binutils 2.48 via upstream commit 471130b39c03623ec6d78ece377ff4da3f6bfe7b; it is not listed in CISA KEV, so active in-the-wild exploitation is not confirmed.
GNU Binutils 2.47 contains a heap buffer overflow in cache_bwrite (bfd/cache.c) that is reachable when the GNU linker 'ld' processes a malformed ELF object file with the --gc-sections and -w options. Exploitation is local and low-impact per the vendor vector (CVSS 4.0 base 1.9, AV:L/PR:L, C/I/A:L), but publicly available exploit code exists, confirming the overflow is reproducible against a released version. The issue was reported upstream via Sourceware Bugzilla bug 34442 and, per the vulnerability record, the project has not responded, so no fixed release has been identified.
Denial-of-service in vLLM's Rust-based tiktoken tokenizer allows a local low-privileged attacker to crash the vLLM process by supplying a crafted vocab file containing duplicate token ranks. The TiktokenTokenizer::new() function in the Rust tokenizer backend previously panicked unconditionally when parsing a tiktoken file with two tokens sharing the same rank value, rather than returning a graceful error. A public proof-of-concept exploit is available via GitHub Gist; no patch has been merged as the fixing pull request remains open.
Incorrect access control enforcement in Arista EOS 4.36.0 through 4.36.1F allows a stale ACL entry - produced by a race condition during 802.1X supplicant re-authentication - to persist in system state and be incorrectly applied to new supplicants after an AclAgent daemon restart. The vulnerability requires both triggering a precise race condition during re-authentication and a subsequent administrator-initiated AclAgent restart, making opportunistic exploitation highly constrained. No public exploit code has been identified, and CISA's SSVC framework classifies exploitation status as none with non-automated attack path and partial technical impact.
Missing authentication on the API Command Endpoint in 0x4m4's HexStrike AI (hexstrike_server.py) allows any remote, unauthenticated caller to invoke server-side API commands without presenting credentials. All commits through d689933ff579 in the hexstrike-ai repository are affected; the project uses rolling releases with no discrete versioning, and the maintainer has not responded to the responsible disclosure filed in GitHub issue #223. A public exploit has been disclosed (CVSS 4.0 E:P), lowering the bar for exploitation to any HTTP client with network reach to the exposed server.
SQL injection in Yot CMS 3.3.x via the Login function in global.php allows remote unauthenticated attackers to supply crafted SQL payloads through the yot3_user and yot3_pass cookie values, bypassing authentication and forging administrator sessions. The researcher-published GitHub PoC (by dddwmr) explicitly demonstrates full admin session forgery as the end result, making the assigned CVSS 5.5 score a material understatement of actual impact. Publicly available exploit code exists; no CISA KEV listing was confirmed at time of analysis.
Unexpected system termination can be triggered on Apple devices by a locally executed app that exploits a use-after-free memory corruption in shared system code, which Apple addressed through improved memory management. The flaw affects essentially every current Apple OS branch below the fixed releases — iOS/iPadOS 26.6+, macOS 15.8/26.6+/27, tvOS 26.6+/27, visionOS 26.6+/27 and watchOS 26.6+/27 — with CVSS 5.5 reflecting an availability-only impact and a local attack vector. EPSS is low (0.24%, 16th percentile), no public exploit code has been identified, and there is no CISA KEV entry, so this is a routine patch-cycle item rather than an urgent threat.
A buffer overflow in multiple Apple operating systems — iOS 18.7.10, iPadOS 18.7.10, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, and macOS Sonoma 14.8.8 and earlier — allows a locally executing app to crash the affected system or process, producing a denial of service. The flaw stems from insufficient bounds checking (CWE-120) and is rated CVSS 5.5 (AV:L/AC:L/PR:L/UI:N, availability-only impact), meaning an attacker must already have the ability to run code as a low-privileged app on the device. Apple has released patches and there is no CISA KEV listing, no public exploit code identified, and EPSS is low at 0.21% (12th percentile), so real-world exploitation pressure is currently minimal.
Apple fixed a kernel uninitialized-memory flaw (CWE-457) across iOS/iPadOS, macOS, tvOS, visionOS, and watchOS in which a locally installed app can determine kernel memory layout, defeating address-space randomization. The impact is information disclosure only - high confidentiality, no integrity or availability impact - and exploitation requires a local app plus user interaction (CVSS:3.1/AV:L/AC:L/PR:N/UI:R, 5.5). Apple shipped patches on [dates not specified] for iOS/iPadOS 26.7 and 27, macOS Sequoia 15.8, macOS Tahoe 26.7, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27; no public exploit code or active exploitation is indicated, and EPSS is low (0.21%, 11th percentile).
An out-of-bounds write in Apple's operating system kernel (CWE-787) allows a locally installed app to corrupt kernel memory or force an unexpected system termination, affecting iOS/iPadOS, macOS, tvOS, visionOS, and watchOS. Apple fixed the flaw with improved bounds checking in iOS 26.7 and 27, iPadOS 26.7 and 27, macOS Sequoia 15.8, macOS Tahoe 26.7, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27. Exploitation requires a local app (CVSS PR:L) with no user interaction, so real-world risk is currently low - EPSS is only 0.21% (11th percentile), the issue is not listed in CISA KEV, and no public exploit code has been identified.
A use-after-free (CWE-416) in Apple's memory management code allows a locally running application on iOS, iPadOS, macOS, tvOS, visionOS and watchOS to crash the affected system, producing an unexpected termination or reboot. The flaw affects all platforms before the fixed releases (iOS/iPadOS 26.7 and 27, macOS Sequoia 15.8, macOS Tahoe 26.7, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27) and rates CVSS 5.5 (AV:L/PR:L/UI:N, availability-only impact). No public exploit code or active exploitation has been identified, and EPSS is low at 0.21% (11th percentile), so this is a patched, availability-only issue rather than an urgent remote-code-execution threat.
An authorization flaw in Apple's operating systems lets a locally installed malicious app bypass Privacy preferences on affected iOS, iPadOS, and macOS builds. Apple addressed the issue through improved state management in iOS 18.7.10, iPadOS 18.7.10, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, and macOS Sonoma 14.8.8. The CVSS 3.1 base score is 5.5 (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N), EPSS is 0.21% (11th percentile), there is no CISA KEV listing and no public exploit code identified at the time of analysis.
Information disclosure in Apple's iOS, iPadOS, macOS, tvOS and watchOS platforms allows an app running on the device to reach sensitive user data that the operating system's data protection mechanisms were supposed to keep isolated from it. Apple resolved the issue with improved data protection in iOS and iPadOS 26.7 and 27, macOS Sequoia 15.8, macOS Tahoe 26.7, macOS Golden Gate 27, tvOS 27 and watchOS 27, with vendor advisories published across seven support pages. No public exploit code or active exploitation has been reported, EPSS is low at 0.20% (10th percentile), and the issue is not listed in CISA KEV, so this reads as a routine hardening fix rather than an urgent emergency-patch event.
Improper authorization checks in Apple's headphone motion data handling allow a locally installed app to read motion sensor data from connected headphones without prompting the user for consent, affecting iOS/iPadOS 26.7 and 27 and earlier, macOS Sequoia 15.8, macOS Tahoe 26.7, macOS Golden Gate 27, tvOS 27 and watchOS 27 and earlier. Exploitation requires a malicious or compromised app and user interaction, and the impact is limited to confidentiality of headphone sensor data (CVSS 5.5, C:H/I:N/A:N). Apple has shipped fixes in all affected operating systems; EPSS is low (0.20%, 10th percentile), there is no CISA KEV listing and no public exploit code identified at time of analysis.
Improper access control in Apple's operating system family (iOS/iPadOS, macOS, tvOS, visionOS, watchOS) lets a locally installed app bypass intended permission restrictions and read sensitive user data it should not be able to reach. Apple addressed the flaw with additional restrictions in iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27. Exploitation requires the attacker to already run code on the device as an app (PR:L, AV:L), and no public exploit code or active exploitation has been identified; EPSS is only 0.20% (10th percentile) and CISA SSVC records exploitation as 'none'.
A path validation weakness in Apple's iOS, iPadOS, and macOS allows a malicious application to reach files outside its intended sandbox and read user-sensitive data. Apple addressed the flaw with improved path validation in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, and macOS Sequoia 15.8, so all older releases remain exposed until updated. Exploitation requires a locally installed app and some user interaction (CVSS AV:L/UI:R), exploit probability is currently very low (EPSS 0.20%, 10th percentile), and no public exploit code or CISA KEV entry has been identified at time of analysis.
Improper memory handling in Apple iOS, iPadOS, and macOS lets a locally running application trigger an unexpected system termination, crashing the device or the operating system; affected versions are iOS/iPadOS prior to 26.7 or 27, and macOS prior to Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. The only prerequisite is the ability to run a malicious or malformed app on the target device (local access, PR:L, no user interaction and no network reachability), and the demonstrated impact is limited to availability - no code execution, privilege escalation, or data access. No public exploit identified at time of analysis, no evidence of active exploitation (not in CISA KEV), EPSS is 0.20% (10th percentile), and vendor patches have been released.
Processing a maliciously crafted image on unpatched Apple devices can trigger a memory-corruption fault that crashes the affected process, producing a local denial-of-service (CVSS 3.1 base 5.5, AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). Affected platforms are iOS and iPadOS before 18.7.10 and macOS before Sonoma 14.8.8, Sequoia 15.7.8, and Golden Gate 27; the attacker cannot trigger the flaw remotely and must get the victim to open or auto-render the crafted image. All signals point to a low-priority issue: EPSS is 0.20% (10th percentile), no public exploit code has been identified at time of analysis, there is no CISA KEV listing, and vendor patches are already available.
Integer overflow (CWE-190) in macOS allows a locally present application to crash an affected component or the operating system, producing a denial-of-service condition rather than code execution or data theft. Apple fixed the flaw with improved input validation in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27 per advisories 149035, 149042 and 149043. Exploitation requires a malicious app to be running on the target Mac and the user to interact with it (AV:L/UI:R); no public exploit code has been identified and EPSS is only 0.19% (9th percentile), so this is a routine patch-cycle item rather than an urgent one.
Local directory-path traversal in Apple macOS allows an app already running on the host to reach and read sensitive user data outside the directory it is permitted to access. The root cause is insufficient validation of directory paths (CWE-22), and Apple has remediated it in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27. Exploitation requires the attacker to already have code running as a low-privileged local application (AV:L, PR:L) with no user interaction, and no public exploit code has been identified at time of analysis; with an EPSS score of 0.19% (9th percentile) and no CISA KEV listing, this is a genuine but low-to-moderate priority issue rather than an urgent one.
An incorrect authorization check in Apple macOS lets an application already running on a Mac read sensitive user data it should not be able to reach, an impact limited to confidentiality with no code execution, modification, or denial of service. Exploitation requires local code execution on the target (the assessed vector is AV:L/PR:L/UI:N), so it is only reachable by a malicious or attacker-controlled app already present on the device, and only on unpatched systems below macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27. Apple has released fixes in macOS Sequoia 15.8, macOS Tahoe 26.7, and macOS Golden Gate 27; no public exploit code or confirmed active exploitation has been identified, and EPSS is low at 0.19% (9th percentile), making this a moderate, locally-scoped risk rather than an urgent priority.