Routinator writes a newly retrieved trust anchor (TA) certificate fetched over HTTPS into its cache even when that certificate fails validation, so a failed update can overwrite the previously cached, known-good TA and leave the validator working from bad trust anchor material. Only deployments whose TAL points at an https:// TA URI are exposed, and the attacker must already hold the privileged position over that retrieval channel implied by PR:H - impact is limited to partial integrity and availability loss for RPKI validation (I:L/A:L, CVSS 3.8, C:N). No public exploit code and no confirmed active exploitation were identified at time of analysis, and the priority signal is monitor.
Mattermost 11.7.x through 11.7.10 allows an existing team admin to assign built-in team-member roles through the update-team-member-roles REST API beyond what the configured permission scheme permits, giving the member elevated team permissions. The flaw is an incorrect-authorization issue (CWE-863) with a CVSS score of 3.8; exploitation requires authenticated team-admin access (PR:H) and is realistically an insider or compromised-admin risk. No public exploit has been identified at time of analysis, and the independent assessment and vuln.today priority label rate this as monitor/low priority rather than a widespread threat.
Remote attackers can cause a limited integrity impact on WordPress sites running WooCommerce Photo Reviews through version 1.2.31 by exploiting a race condition, though the high-complexity timing window makes practical exploitation difficult. The CVSS 3.1 vector indicates network reachability with no authentication or user interaction required, but only integrity is affected and confidentiality and availability are unchanged. The priority label is monitor, and no public exploit identified at time of analysis; the issue does not warrant emergency action.
Cross-session AES key confusion in the Zephyr RTOS Espressif ESP32 hardware crypto driver (drivers/crypto/crypto_esp32_aes.c, shipped in Zephyr 4.3.0 through 4.4.2) causes cipher operations to run under another session's key and direction instead of the key the caller installed. The driver advertises up to four independent cipher sessions, but the ESP32 AES peripheral has a single chip-global key/mode register set that aes_begin_session() programmed once, outside the aes_lock mutex, so a second session opened with a different key silently redirects every subsequent ECB, CBC or CTR operation from the first session, and the threaded pattern of begin-then-operate on separate sessions also races. Impact is cryptographic rather than memory corruption: plaintext the application believed protected under its own key may be encrypted or decrypted under a key the attacker knows or supplied, and encrypt/decrypt direction can be inverted; unauthenticated remote exploitation is constrained to custom applications on ESP32 hardware that hold two or more concurrent sessions with different keys, no stock Zephyr subsystem does so, and no public exploit has been identified at time of analysis (vendor fix merged, projected release 4.5.0).
Predictable IPv6 interface identifiers in Zephyr RTOS 3.7.0 through 4.4.2 arise because the stack seeds the long-lived secret key behind RFC 7217 stable IIDs (gen_stable_iid() in subsys/net/ip/ipv6.c) and RFC 8981 temporary IIDs (gen_temporary_iid() in subsys/net/ip/ipv6_pe.c) with sys_rand_get(), an API documented as not cryptographically secure. On boards whose entropy driver selects CONFIG_ENTROPY_NEEDS_PRNG, that API resolves to the shared, invertible xoshiro128++ generator, and on entropy-device backends it silently degrades to k_cycle_get_32() samples on driver failure, so an attacker who passively observes on-wire values drawn from the same stream (ephemeral source ports, DNS query IDs, CoAP message IDs and tokens, DHCPv6 transaction IDs, WebSocket masking keys) can reconstruct the key and then compute a device's stable address for any prefix or link its temporary addresses across networks. Exploitation requires the default-off experimental options CONFIG_NET_IPV6_IID_STABLE or CONFIG_NET_IPV6_PE plus the affected PRNG-backed platform class, and no public exploit has been identified at time of analysis; impact is limited to address predictability and tracking (confidentiality of address-lifetime privacy only), with no memory-safety, integrity or availability effect. No public exploit identified at time of analysis, and the item is not tracked as confirmed actively exploited (CISA KEV).
Authenticated channel members on Mattermost 11.7.x through 11.7.10 can abuse the scheduled-post creation and publication paths to publish messages that render as trusted system events because reserved system post types are not validated. The attacker must already have an account and membership in the target channel, and the deception depends on other users viewing and trusting the forged system-style message; impact is limited to message integrity, with no confidentiality or availability effect. The CVSS vector includes PR:L and UI:R, and the score is 3.5; no public exploit was identified at time of analysis, and the priority label is monitor.
Internal-connection filtering is not applied to the OpenID Connect discovery fetch in Mattermost 11.7.x through 11.7.10, so a System Administrator who controls the configured discovery endpoint URL can learn whether internal addresses and ports are reachable from the server, with the fetch itself triggered by an unauthenticated login request. The assigned CVSS 3.1 score is 2.7 (LOW) with PR:H, reflecting that the actor must already hold System Administrator privileges and that impact is limited to low-confidentiality reachability inference with no integrity or availability effect. No public exploit has been identified at time of analysis, and the reported decision signal is to monitor; the primary remediation is the Mattermost release addressing advisory MMSA-2026-00774.
Reflected cross-site scripting in Asterisk's phone-provisioning HTTP error pages (res_phoneprov) lets an unauthenticated attacker who can reach the web server reflect attacker-controlled text into a response and, if an authorized AMI user clicks the crafted link, read that user's AMI session cookie and impersonate them over the HTTP manager interface. Fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11 and 22.8-cert3; the CVSS 4.0 score is 2.3 and the vector requires AT:P plus UI:P, so exploitation needs a deliberately configured stack (HTTP server, AMI, AMI-over-HTTP and res_phoneprov all enabled, all off by default) and normally a non-default bind address, since the HTTP server listens on 127.0.0.1 by default. No public exploit code or active exploitation has been identified at time of analysis, and priority is assessed as monitor.
HtmlSanitizer's SanitizeDom(string) API leaves attributes untouched on the <html> and <body> wrapper elements it parses into, so markup such as a second <body onload=alert(1)> tag can place a live event handler on the returned document. The issue affects releases before 9.2.1039 and 10.0 prereleases before 10.0.1037-beta, and only matters where the caller serializes more than dom.Body.ChildNodes - for example dom.ToHtml() or the body/html outer HTML - and where a victim then renders that output. Severity signals are low (CVSS 4.0 score 2.3; independent assessment CVSS 3.1 AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N), no public exploit or CISA KEV entry is associated with the flaw at time of analysis, and the vendor has released fixed versions.
boneIO Black firmware before 1.6.0 places no throttle on authentication attempts, so an unauthenticated attacker who can reach the device over an adjacent network can send unlimited login guesses to the web panel endpoint POST /api/login or against SSH, while weak passwords were also permitted by the absence of complexity rules. Compromise is not automatic: it depends on a targeted account using a weak or guessable password and on the attacker sustaining a large number of attempts against a service with no lockout, and the resulting impact is bounded by the privileges of whichever account is cracked. CERT-PL reported the issue and version 1.6.0 introduces per-source and per-account rate limiting on web logins, an 8-character minimum for panel passwords and a three-attempt SSH limit with a shortened login grace time; no public exploit code was identified at time of analysis and the priority signal is monitor.
Authenticated members on MacCMS v10 can redeem one recharge card multiple times by racing concurrent flag=card requests through the user/buy endpoint, inflating their points balance to purchase VIP upgrades and paid content. The defect is a race condition in Card::useData() where the non-locking card read can complete before the card is marked used, but success is timing- and concurrency-dependent and requires a valid member account plus at least one legitimate unredeemed card. A public GitHub issue reference exists but is not verified as working exploit code, and the priority label is monitor.
Open redirect in tornado.web.RedirectHandler (Tornado prior to 6.6) lets crafted request paths shift the scheme or host of the redirect target, so a link on the application's own domain can send victims to an attacker-controlled site for phishing. Only applications whose RedirectHandler URL template places a regex capture-group substitution where it can influence the scheme or host are affected - substitutions at the start of the path, immediately after a fixed host, or at the very start of the template - while static templates and substitutions after a fixed host plus a slash are unaffected, and the attacker needs the victim to click the crafted link (CVSS 4.0 base 2.1, assessed 3.1 vector AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N). Impact is limited to social-engineering-grade redirection with no code execution or data exposure; EPSS is 0.46% (40th percentile), there is no CISA KEV listing, no public exploit identified at time of analysis, and the vendor has released Tornado 6.6.
Out-of-bounds write in SCP: Containment Breach Multiplayer's Skynet++ virtual machine allows remote attackers to corrupt memory when a victim running versions up to 1.295 joins or interacts with a crafted multiplayer session. The flaw is in the BlitzBanks function, is fixed in version 1.3R, and publicly available exploit code exists; no CISA KEV confirmation is present in the supplied data. The CVSS 4.0 record scores it 2.1 with UI:P, while the independent CVSS 3.1 assessment is 8.8 because successful exploitation can fully compromise confidentiality, integrity, and availability on the client.
Unsafe deserialization (CWE-502) in the Workshop Scenario Loader of Ndemic Creations' Plague Inc Evolved affects releases up to and including 1.24.0.3, allowing an attacker who can supply a crafted scenario to have it deserialized when the victim loads it. No authentication is required per the CVSS vector (PR:N), but exploitation depends on user interaction (UI:P, passive): the victim must open or subscribe to attacker-supplied Workshop content, so the attacker cannot trigger the flaw unprompted. Impact is bounded to Low confidentiality, integrity and availability per both the vendor-style CVSS 4.0 score of 5.3 and the independent CVSS 3.1 assessment (C:L/I:L/A:L); the CVSS 4.0 Exploit Maturity value of Proof-of-Concept indicates a public PoC reference exists (a third-party blog post is cited), though it is not verified as working exploit code, and there is no CISA KEV listing. Upgrading to 1.24.0.4 is sufficient to fix the issue.
Improper access control in the Local API Server component of OpenBB (openbb_platform/core/openbb_core/app/model/api_settings.py) allows remote attackers to reach API behaviour they should not be able to influence, resulting in limited confidentiality disclosure. The issue affects versions up to and including 4.7.2 and 5.0.0, and exploitation requires the Local API Server to be deployed and running plus user interaction - consistent with luring a user into triggering a browser-based or cross-origin request against the locally running server; library or CLI-only users are not exposed. The disclosure states that exploit code has been published and may be used, but there is no KEV confirmation of active in-the-wild exploitation, EPSS scoring is not available in the supplied data, the impact is confined to low confidentiality with no integrity or availability effect, and the vuln.today decision label is 'monitor'; the vendor was contacted and did not respond.
Remote SQL injection in itsourcecode Online Book Store 1.0 through the bookisbn argument of /book.php can let a low-privilege authenticated attacker manipulate database queries, with low confidentiality, integrity, and availability impact. The issue carries CVSS 2.1 (CVSS:4.0) and an EPSS score of 0.25% (16th percentile), and the vuln.today decision label is monitor. SSVC exploitation status is poc and a public PoC reference exists; it is not verified as working exploit code.
Denial of service in Xpdf 4.06 and earlier occurs when the viewer processes an attacker-supplied PDF containing a JPEG 2000 image whose progression order field is malformed, causing an infinite loop and a hung process. The attack is local and file-based and is unauthenticated per the CVSS vector (PR:N), but practical exploitation depends on the victim opening the crafted PDF in Xpdf; impact is limited to availability, with no code execution, data disclosure, or integrity loss. No public exploit has been identified at time of analysis, EPSS is 0.11% (1st percentile), and the vuln.today decision is monitor.
HTTP request splitting in the Erlang hackney HTTP client (2.0.0 through 4.9.0) allows a caller-supplied proxy_auth_fun return value to inject additional header lines into the CONNECT request hackney sends to an HTTP proxy. The issue is only reachable in a non-default setup: hackney must be used over an HTTP CONNECT proxy, a proxy_auth_fun callback must be configured, the proxy must answer with a 407, and the callback must build its returned binary from untrusted data such as the proxy's challenge headers instead of static credentials, so an attacker must control or intercept the proxy response to influence the value. Impact is limited to request integrity against the proxy, no public exploit has been identified at time of analysis, and real-world priority is low; the vendor-released fix is 4.9.0.
Heap-based buffer overflow in libimobiledevice's Web Inspector client (webinspector_receive_with_timeout in src/webinspector.c) affects releases through 1.4.0 when the library parses a crafted or oversized message from a Web Inspector peer. The assessed impact is bounded: no confidentiality loss, low integrity and low availability, with exploitation requiring a low-privileged session (PR:L) and a peer that is attacker-controlled, spoofed, or compromised, and the precise overflow trigger is not described in the available sources. The CNA description states the exploit is now public and a writeup is linked; the CVSS 4.0 vector carries exploit maturity E:P (proof-of-concept), there is no KEV confirmation, and the vuln.today decision label is 'monitor', so real-world priority is low.
Denial of service in Qt's Network module: a null pointer dereference in QNetworkAccessManager lets a malicious or compromised HTTP/2 server crash Qt-based client applications that connect to it, affecting Qt 6.8.0-6.8.9 and 6.9.0-6.11.2. The victim client must initiate the connection and the attacker must control or compromise the server and orchestrate a specific HTTP/2 frame sequence; there is no code execution, data disclosure, or integrity impact. A vendor patch is available, and no public exploit was identified at time of analysis.
Heap-based buffer overflow in libimobiledevice's AFC handling (src/afc.c) affects versions through 1.4.0 and can be triggered when the library parses data from an attacker-controlled AFC peer, such as a malicious iOS device or a rogue AFC service. All impact ratings are Low and the priority decision is monitor; the description states exploit code is publicly available and a third-party writeup is referenced, but no KEV or EPSS signal is supplied. Affected deployments must actively use AFC and accept data from an untrusted peer, and the precise trigger is not described in the available sources.
OS command injection in continuedev Continue 2.0.0 is reachable through MCPManagerSingleton.setConnections in core/config/ConfigHandler.ts when the MCP Server Transport is initialized, allowing an attacker who controls an MCP server definition to run operating system commands in the context of the Continue process. Exploitation is gated by user interaction: a Continue user must add or connect to a hostile MCP server configuration, so a default installation is not remotely reachable without that trust decision. VulDB - the sole source for this entry - states that exploit details have been disclosed publicly and may be used, and that the vendor was contacted but did not respond; active exploitation is not confirmed by CISA KEV and no EPSS signal was supplied. Reported severity is modest (CVSS 4.0: 5.3; our assessment CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), and the priority label is this_month rather than an emergency.
Missing authorization in the Datafeedr Product Sets plugin for WordPress (versions up to and including 1.3.24) allows any logged-in user to delete saved searches they do not own. The AJAX handler dfrps_ajax_delete_saved_search in functions/ajax.php performs no capability check (CWE-862), so an attacker only needs a low-privilege account on the target site-no administrative role is required-to trigger unauthorized state changes. Impact is limited to low integrity and availability (no confidentiality exposure), reflected in the 2.1 CVSS v4.0 score and the assessed CVSS 3.1 vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L; the vulnerability is fixed in 1.3.25, the disclosure states public exploit code exists, and the current priority decision is monitor rather than emergency.
Code injection in the NNP Converter utility shipped with Sony Neural Network Libraries (NNabla) through version 1.39.0 allows an attacker who supplies a crafted model file to have Python code executed through eval() when a victim converts that file. The unsafe sink is func_set_nnabla_version_decorate in python/src/nnabla/utils/converter/utils.py, which passes the model's attacker-controlled 'function.type' value into eval(); the CVSS 4.0 vector requires user interaction (UI:P), so nothing happens until a person or an automated pipeline actively loads and converts the malicious model. The CNA reports that exploit code has been released publicly and that the vendor did not respond to disclosure; the library is end-of-life with no fixed version, and the overall priority is 'monitor' because exploitation depends on someone processing untrusted input rather than on a remotely reachable service.
Code injection in Sony nnabla through 1.39.0 can execute attacker-supplied Python when a user runs the 'nnabla_cli encode_param' command on a malicious text-format parameter file. The affected releases are no longer supported, no vendor fix is available, and the disclosure references publicly available exploit code; exploitation depends on the operator choosing to process the crafted file, which keeps the assessed risk low.
Type confusion in Objenesis 3.5 and earlier can make newInstance() return an object of a different same-named class when one cached Objenesis/ObjenesisStd instance is shared across multiple class loaders. A local low-privileged attacker who can execute code in the same JVM as a co-tenant or plugin can win the name-keyed cache slot and cause object substitution across the trust boundary, or a repeatable ClassCastException crash when the caller uses the returned value as its own type. The risk is limited to multi-class-loader deployments that reuse a single cached instance; scores are low (CVSS 4.0 2.0; vendor CVSS 3.1 4.5), no CISA KEV entry or confirmed active exploitation is reported, and the advisory includes a proof-of-concept reproduction.
An out-of-bounds read in Qt Framework's QCborValue::fromCbor() can expose memory contents or crash a parsing application when malformed CBOR is deserialized. The assessed vector requires local access, high complexity, and user interaction, with exploitation depending on a Qt application parsing attacker-supplied CBOR; the exact trigger channel depends on the embedding application. No public exploit identified at time of analysis, and this is a low-priority issue, and the available signals agree on that; a vendor patch is available.
Memory corruption in libimobiledevice through 1.4.0 allows a local user with low-level privileges to corrupt memory in any process that passes a manipulated 'Value' argument into the afc_get_device_info_key function, with low impact on confidentiality, integrity and availability. The vendor was contacted early but did not respond, and no fixed release is identified in the available data, so exposure persists for anything built against 1.4.0 or earlier. A public write-up describing the flaw is referenced; it is not verified as working exploit code, and the aggregated decision signals (local-only path, low privileges required, low impact, no KEV listing) rate real-world risk as low and warrant monitoring rather than emergency action.
A race condition in HaschekSolutions PictShare through 3.7.1 allows an attacker who can drive the upload endpoints to swap a file between validation and storage, bypassing the mime-type, SHA-1 and naughty-list checks enforced in architect() and API::upload(). The flaw is reachable over the network but requires winning a narrow, timing-dependent TOCTOU window (AC:H, PR:L per the CVSS vector; vendor rates exploitability as difficult), and its practical impact is limited to integrity of stored uploads rather than code execution. A public write-up and PoC reference exist (xmit.xyz); it is not verified as working exploit code, there is no KEV listing, and the priority decision is monitor. Fixed in release 3.7.2 (commit 6306e33).
Command injection in apache-airflow-providers-ssh 4.3.0 through 7.0.1 lets a user who can trigger a Dag, but who cannot author Dags, run arbitrary shell commands on the remote SSH host as the SSH connection's user. SSHRemoteJobOperator quoted templated `environment` values only once even though they were embedded in an already-quoted wrapper script, so payloads such as `$(...)` or backticks were evaluated by the remote shell; the exposed path is a Dag that feeds trigger-time input (`params` or `dag_run.conf`) into `environment`. Exploitation is not possible against a default installation - it requires that non-default Dag design to already exist plus Airflow authorization to trigger that specific Dag - and no public exploit has been identified at time of analysis, with EPSS at 0.27% (20th percentile) and a vuln.today decision label of monitor. The vendor-released fix is version 7.0.1.
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drain the hangcheck timer and works on V3D unbind Nothing stops the hangcheck timer that submitted jobs arm, or the job_done_work that the render-done interrupt queues, at teardown: vc4_irq_disable() cancels only overflow_mem_work, and vc4_gem_destroy() runs from the drm-managed release, after vc4_v3d_unbind() has already uninstalled the V3D interrupt and cleared vc4->v3d. A timer still armed by then reads V3D registers through the NULL vc4->v3d pointer, and the late callbacks run on the vc4_dev embedding them after it has been freed. Drain them in vc4_v3d_unbind(): shut the timer down and cancel reset_work before the interrupt is taken down, because its vc4_irq_reset() re-enables it, then flush job_done_work so that completions queued at teardown still release their jobs. This issue was found by an in-house static analysis tool.
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: serialize vblank counter reads against GPU reset The vblank counter callback reads display registers and scanout position without holding reset_domain->sem. During GPU recovery, display commit work can call the callback while reset owns the semaphore for writing. The hardware access then triggers the lockdep_assert_held() in amdgpu_device_skip_hw_access() and sets TAINT_WARN when lockdep is enabled. Try to acquire the reset semaphore for reading before accessing the hardware, and hold it across the counter and scanout-position reads. If reset is already in progress, return DRM's cached software vblank count instead. This avoids blocking behind reset and avoids accessing display hardware while it is being reset. The cached count is less accurate than the hardware count, but is used only when reset prevents a safe hardware read. This addresses the reset-time warning from this vblank path; it does not suppress or fix unrelated lockdep warnings. (cherry picked from commit 51a4359f7431a4be5e42803c8bdaf7e0e5be2934)
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in set_ipv6_addr When executing IPv6 address rewrite actions on IPv6 fragments, set_ipv6_addr() calls update_ipv6_checksum(). If parse_ipv6hdr() processes a non-first IPv6 fragment, it sets key->ip.proto to NEXTHDR_FRAGMENT and returns early without calling skb_set_transport_header(). update_ipv6_checksum() unconditionally evaluates skb_transport_offset() on entry before checking l4_proto. Because skb->transport_header is uninitialized, this triggers a warning under CONFIG_DEBUG_NET=y although it is completely harmless. Fix this by returning early in update_ipv6_checksum() if l4_proto is NEXTHDR_FRAGMENT. This avoids reading the uninitialized transport offset for fragments while preserving the debug warning for any other protocol where the transport header is unexpectedly missing. See the syzbot trace: !skb_transport_header_was_set(skb) WARNING: ./include/linux/skbuff.h:3075 at skb_transport_header include/linux/skbuff.h:3075 [inline], CPU#1: syz-executor463/5635 WARNING: ./include/linux/skbuff.h:3075 at skb_transport_offset include/linux/skbuff.h:3250 [inline], CPU#1: syz-executor463/5635 WARNING: ./include/linux/skbuff.h:3075 at update_ipv6_checksum net/openvswitch/actions.c:361 [inline], CPU#1: syz-executor463/5635 WARNING: ./include/linux/skbuff.h:3075 at set_ipv6_addr+0x462/0x660 net/openvswitch/actions.c:399, CPU#1: syz-executor463/5635 [...] RIP: 0010:skb_transport_header include/linux/skbuff.h:3075 [inline] RIP: 0010:skb_transport_offset include/linux/skbuff.h:3250 [inline] RIP: 0010:update_ipv6_checksum net/openvswitch/actions.c:361 [inline] RIP: 0010:set_ipv6_addr+0x462/0x660 net/openvswitch/actions.c:399 [...] Call Trace: <TASK> set_ipv6 net/openvswitch/actions.c:531 [inline] do_execute_actions+0x557e/0x8600 net/openvswitch/actions.c:1366 ovs_execute_actions+0xde/0x520 net/openvswitch/actions.c:1592 ovs_packet_cmd_execute+0xb4f/0xf10 net/openvswitch/datapath.c:705 genl_family_rcv_msg_doit+0x233/0x340 net/netlink/genetlink.c:1114 genl_rcv_msg+0x614/0x7a0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2572 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218 netlink_unicast+0x7bd/0x940 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1916 sock_sendmsg_nosec+0x14e/0x190 net/socket.c:800
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2, visionOS 27. Processing a maliciously crafted image may lead to heap corruption.
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination.
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted audio file may lead to memory corruption.
A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
An authorization issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may bypass Gatekeeper checks.
An information leakage was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to heap corruption.
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Golden Gate 27.2. An app may be able to break out of its sandbox.
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. A remote attacker may be able to cause unexpected app termination.
An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.