Information Disclosure

Local information disclosure in the Linux kernel s390 protected-key (pkey) subsystem affects IBM Z (s390x) mainframe systems where the PKEY_VERIFYPROTK ioctl fails to validate the user-supplied buffer length before processing, allowing a local low-privileged user with access to the pkey device to trigger an out-of-bounds kernel memory access. Fixed by explicitly checking the request length against the buffer size and failing when it exceeds it. There is no public exploit identified at time of analysis and this CVE is not listed in CISA KEV.

Local privilege-impacting memory corruption in the Linux kernel's s390 (IBM Z) pkey subsystem allows a low-privileged local user to trigger an out-of-bounds write through the pkey_pckmo key_to_protkey() handler, which failed to validate that generated protected-key output fits within the caller-provided target buffer. The flaw affects s390 builds of the kernel prior to the fixed stable releases and carries high confidentiality, integrity, and availability impact (CVSS 7.8). There is no public exploit identified at time of analysis and it is not listed in CISA KEV.

Hardcoded static credentials in Cisco Secure Firewall Management Center (FMC) Software allow an unauthenticated remote attacker to log in to the web interface using a built-in low-privileged account and access sensitive data. The flaw affects an extensive range of FMC versions from 7.0.0 through 10.0.1 and is rooted in CWE-259 (Use of Hard-coded Password). Cisco has self-elevated the Security Impact Rating to High - despite a CVSS 5.3 Medium score - explicitly because this credential foothold can be chained with other FMC vulnerabilities to escalate privileges, making the real-world risk materially higher than the base score implies. No public exploit or CISA KEV listing has been confirmed at time of analysis.

Out-of-bounds read in Autodesk AutoCAD, AutoCAD LT, and DWG TrueView 2027.0.0 exposes users to application crashes and sensitive memory disclosure when parsing maliciously crafted DWG or DXF files. Exploitation requires a local user to open a weaponized file, making social engineering the primary delivery mechanism targeting CAD operators in AEC and manufacturing environments. No active exploitation has been confirmed (not in CISA KEV), EPSS sits at a negligible 0.12% (2nd percentile), and a vendor patch is available via ADSK-SA-2026-0009.

Arbitrary code execution in Autodesk AutoCAD, AutoCAD LT, and DWG TrueView occurs when a user opens a maliciously crafted DXF file, triggering a heap-based buffer overflow (CWE-122) in the file parser. A local attacker who convinces a victim to open the file can crash the application, read sensitive in-process memory, or run code in the context of the current user. There is no public exploit identified at time of analysis, and the file-format vector plus required user interaction places this in the classic 'malicious drawing file' threat model rather than remote mass exploitation.

Package integrity bypass in the Gleam build tool (compiler-cli) versions 0.18.0 up to 1.18.0 lets an adversary-in-the-middle substitute forged Hex dependency contents during resolution. Although Gleam fetches signature-verified registry metadata, gleam_cli::dependencies::lookup_package instead recorded the SHA-256 outer_checksum and dependency names from a second, unsigned Hex API call into manifest.toml, so the forged tarball validates against its own forged checksum. Exploitation requires an attacker who can both perform TLS interception with a CA trusted by the Gleam process and modify the tarball; there is no public exploit identified at time of analysis and it is not in CISA KEV.

Credential exfiltration in swagger-typescript-api (npm, versions <= 13.12.1) allows a malicious OpenAPI spec to steal a developer's bearer token during code generation: when `--authorizationToken` is set, the generator attaches that token to the Authorization header of every request it makes while resolving external `$ref` URLs, with no same-origin check, so a `$ref` pointing at an attacker-controlled host receives the token verbatim. The stolen credential is typically high-value (GitHub PAT, OAuth bearer, CI service-account token) and its capture is equivalent to full account/scope takeover. A working proof-of-concept was supplied by the reporter (publicly available exploit code exists); it is not listed in CISA KEV and there is no evidence of active exploitation.

Use-after-free in Node.js HTTP/2 implementation allows remote unauthenticated attackers to crash the Node.js process by sending crafted HTTP/2 RST_STREAM frames while the stream object remains in scope. The fix - 'defer rst stream while in scope' - confirms that RST_STREAM processing freed or invalidated memory still referenced by the active stream context. With CVSS A:H and AV:N/AC:L/PR:N/UI:N, this is a straightforward remote denial-of-service against any Node.js server with HTTP/2 enabled. No public exploit or CISA KEV listing has been identified at time of analysis, but the low-complexity network vector and multi-LTS-branch impact make patching urgent.

Denial of service in open-iscsi's bundled open-isns library (iSNS implementation) lets an unauthenticated man-in-the-middle attacker crash the iSNS client/server by triggering a double free in the attribute-decoding routines. The flaw stems from freed pointers not being nulled in isns_attr_type_string_decode and isns_attr_type_opaque_decode, so a crafted iSNS message causes the same allocation to be freed twice. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; impact is limited to availability, with no confidentiality or integrity effect.

Denial of service in the cJSON C library (versions through 1.7.19) arises from exponential algorithmic complexity in the cJSON_Compare() function, which recursively descends into each shared object subtree twice per level with no depth guard. Applications that call cJSON_Compare() on attacker-influenced JSON that is structurally equal to a reference document can be forced to burn hours of CPU on a document of only a few hundred bytes (nesting depth around 40), with cost roughly doubling per added level. No public exploit identified at time of analysis and the issue is not on CISA KEV; impact is compute exhaustion only, with no confidentiality or integrity effect.

Plaintext password storage in Streamsoft Business Intelligence (BI) exposes every user's credential in recoverable form within the application database, meaning anyone able to read the database obtains working passwords directly rather than hashes. The flaw (CWE-256) affects all versions prior to 6.8.0.0, where the vendor introduced proper storage and forced a password change on first login after upgrade. There is no public exploit identified at time of analysis and it is not in CISA KEV; impact is confidentiality of credentials, amplified by likely password reuse across systems.

SQL injection in Frappe's ERPNext (ERPNext 15.107.0, Frappe framework 15.107.2) lets an authenticated low-privilege user run arbitrary SQL by placing SQL metacharacters in the name (docname) of a Supplier record, which is later interpolated into a query via str.format() instead of being parameterized. Because the injected query runs with the application's database privileges, an attacker can bypass Frappe's DocPerm access controls and read data they should not see, including fragments of the administrator's password hash, stored credentials, integration tokens, and financial records. Per the CVSS 4.0 vector the flaw is network-reachable with low attack complexity and only low privileges (PR:L), and there is no public exploit identified at time of analysis.

Cache poisoning and content-type confusion in the Apache Traffic Server webp_transform plugin allows remote clients to induce the proxy to decode images unsafely and store mislabeled, cacheable responses that are then served to other users. Affected releases span the 8.x (through 8.1.9), 9.x (through 9.2.14), and 10.x (through 10.1.3) branches when the optional webp_transform plugin is enabled. There is no public exploit identified at time of analysis, it is not listed in CISA KEV, and no EPSS score was provided, so risk here is driven by the CVSS 8.2 (CVSS 4.0) rating rather than observed exploitation.

Denial of service in Apache Traffic Server (versions 8.0.0-8.1.9, 9.0.0-9.2.14, and 10.0.0-10.1.3) arises from a use-after-free (CWE-416) in the intercept plugin, allowing a remote attacker to crash or destabilize the proxy server. The flaw carries a CVSS 4.0 base score of 8.2, driven entirely by high availability impact with no confidentiality or integrity effect, and exploitation depends on a specific attack condition (AT:P) rather than being trivially reproducible. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.

Denial of service in the Apache Traffic Server ESI (Edge Side Includes) plugin allows remote unauthenticated attackers to trigger unbounded recursion while the plugin fetches attacker-controlled URLs, exhausting server resources. It affects Apache Traffic Server 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3 when the ESI plugin is enabled. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.

Denial of service in Apache Traffic Server (versions 8.0.0-8.1.9, 9.0.0-9.2.14, and 10.0.0-10.1.3) arises from a memory leak in the HostDB code path that processes DNS SRV records, allowing remote attackers to progressively exhaust proxy memory and degrade or crash the service. The CVSS 4.0 vector (8.2, VA:H) points to an availability impact rather than the information disclosure implied by the vendor tag. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.

Memory corruption in Apache Traffic Server's remap configuration handling lets remote attackers trigger a use-after-free and time-of-check/time-of-use race, primarily crashing the proxy (high availability impact) with secondary low-level confidentiality and integrity exposure. It affects the 8.x, 9.x, and 10.x branches up to 8.1.9, 9.2.14, and 10.1.3, and is fixed in 9.2.15 and 10.1.4. Reported by Apache with a CVSS 4.0 score of 8.3; no public exploit identified at time of analysis and it is not on CISA KEV.

Improper certificate generation in the Apache Traffic Server certifier plugin lets remote attackers dictate the contents of dynamically minted TLS certificates by controlling the client SNI value, affecting ATS 8.0.0-8.1.9, 9.0.0-9.2.14, and 10.0.0-10.1.3. Because the plugin trusts attacker-supplied SNI to drive certificate creation (CWE-295), an unauthenticated remote party can influence which identities the proxy vouches for, undermining TLS trust. No public exploit identified at time of analysis, though the vendor-scored CVSS 4.0 base is 8.4 (high).

Kernel memory corruption in the Linux kernel Bluetooth L2CAP stack arises from a use-after-free in l2cap_sock_new_connection_cb(), which dereferenced a child socket after release_sock(parent) had already exposed it via the accept queue, letting a racing task accept and free the socket first. Any Linux host with Bluetooth enabled and an L2CAP listening socket is affected; a Bluetooth-adjacent attacker able to trigger new connections can win the race to corrupt freed kernel memory, rated CVSS 3.1 8.8 (C:H/I:H/A:H). There is no public exploit identified at time of analysis and EPSS is low at 0.16%, indicating a proactively fixed memory-safety bug rather than one under active attack.

Local privilege escalation potential via memory corruption in the Linux kernel's perf/core subsystem, where perf_event_remove_on_exec() fails to detach group relationships when removing a group-leader event during exec. On affected kernels, a local user who can open perf events can corrupt the PMU context active list through a double list_add, undermining kernel memory integrity (CVSS 7.8, C:H/I:H/A:H). EPSS is low at 0.16% (5th percentile) with no public exploit identified at time of analysis and no CISA KEV listing.

HTTP request smuggling in Apache Traffic Server (versions 8.0.0-8.1.9, 9.0.0-9.2.14, and 10.0.0-10.1.3) lets remote attackers desynchronize proxy/backend request parsing because the server fails to reject the Transfer-Encoding header on inbound HTTP/2 requests. When ATS downgrades those HTTP/2 requests to HTTP/1.1 for origin servers, the improper Transfer-Encoding directive creates a parsing discrepancy that enables downgrade request smuggling. No public exploit identified at time of analysis and it is not listed in CISA KEV, but this is a well-understood smuggling primitive tagged by the reporter for information disclosure.

Request smuggling in Apache Traffic Server (versions 8.0.0-8.1.9, 9.0.0-9.2.14, and 10.0.0-10.1.3) allows remote attackers to desynchronize the proxy from backend origin servers by sending malformed chunked-transfer-encoded messages, per Apache advisory and NVD. Successful exploitation lets an attacker poison caches, bypass access controls, or disclose another client's information as tagged by the reporting source. No public exploit identified at time of analysis and the flaw is not in CISA KEV.

Improper input validation in Apache Traffic Server versions 9.2.0-9.2.14 and 10.1.0-10.1.3 lets remote attackers send malformed input that the proxy fails to validate, allowing manipulation of the integrity of downstream/backend traffic (e.g. request smuggling or response manipulation against systems behind the proxy). The CVSS 4.0 score is 7.7 (High), driven entirely by subsequent-system integrity impact (SI:H) with no confidentiality or availability effect. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.

Credential exposure in the Vacron VIN-DS783E-E6 network video/surveillance device lets unauthenticated remote attackers invoke an undocumented hidden function that returns the device administrator credentials, per a TWCERT-coordinated disclosure. Recovering the admin login yields complete takeover of the appliance (login, configuration, and video streams). No public exploit code has been identified at time of analysis, and the CVE is not listed in CISA KEV; no EPSS score was provided in the input.

Cross-user information disclosure in IBM Langflow OSS 1.0.0-1.10.1 allows authenticated attackers to access private vector content and poison query results by reusing another user's FAISS namespace. This leads to high confidentiality impact and low integrity impact; the vulnerability has a CVSS 3.1 score of 7.1, and a vendor patch is available.

Sensitive information disclosure in IBM WebSphere Application Server 8.5 and 9.0 Traditional allows a remote, unauthenticated attacker to obtain confidential data, assessed by IBM as a High-severity issue (CVSS 7.5). The root cause is CWE-532, indicating that sensitive information is inserted into log files or diagnostic output in a manner accessible to remote actors. No public exploit code exists and CISA has not added this to the Known Exploited Vulnerabilities catalog; however, the CVSS vector attributes high confidentiality impact, and a vendor-released patch is available via IBM support.

Prototype pollution in the @instana/core Node.js tracer, part of IBM Observability with Instana Agent builds 1.0.303 to 1.0.320, allows a local attacker to inject arbitrary properties into JavaScript object prototypes. This can lead to information disclosure and high integrity impact. No public exploit or active exploitation reported; vendor patch is available.

Improper session expiration in IBM Aspera Faspex 5 allows remote unauthenticated attackers to access sensitive data. The vulnerability, tracked as CVE-2026-14996, affects versions 5.0.0 through 5.0.15.4 and stems from insufficient session invalidation (CWE-613). Attackers who obtain a valid session token can reuse it after the intended lifetime, compromising confidentiality of file transfer data with limited integrity impact.

HTTP response smuggling in IBM WebSphere Application Server 9.0, 8.5, and Liberty versions 17.0.0.3 through 26.0.0.7 allows unauthenticated remote attackers to poison intermediate caching proxies by exploiting improper handling of non-standard HTTP version tokens. Successful exploitation leads to high confidentiality and integrity impact through cache poisoning, potentially enabling information disclosure and malicious content injection into proxied responses. A vendor patch is available, though no public exploit code or active exploitation has been reported at this time.

HTTP request smuggling in IBM WebSphere Application Server 8.5, 9.0, and Liberty 17.0.0.3 through 26.0.0.7 allows remote attackers to poison request queues, potentially leading to unauthorized information disclosure and cache poisoning. The flaw stems from improper handling of TRACE requests, with a CVSS base score of 8.7 but no evidence of active exploitation or public exploit code at the time of analysis.

HTTP request smuggling in IBM WebSphere Application Server (versions 8.5 and 9.0) and WebSphere Application Server Liberty (17.0.0.3 through 26.0.0.7) enables remote unauthenticated attackers to poison shared HTTP connections between a front-end proxy and the application server backend. The CVSS 8.1 score reflects full confidentiality, integrity, and availability impact (C:H/I:H/A:H) but is constrained by high attack complexity (AC:H), requiring a specific proxy-to-WAS pipeline configuration to exploit. No public exploit is identified at time of analysis; EPSS is very low at 0.21% (11th percentile) and SSVC confirms no known exploitation, though technical impact is rated total.

Credential reuse in Terraform MCP Server allows cross-tenant token leakage, enabling unauthorized tool execution on behalf of other users. The vulnerability affects versions prior to 1.1.0 when the server is run in streamable-HTTP stateless transport mode. No public exploit code is known, but the critical CVSS score and network attack vector indicate high potential risk.

Remote denial-of-service in the SIPSorcery NuGet library (≤10.0.8) allows an unauthenticated attacker to terminate an active RTP or WebRTC media session by sending a single malformed UDP packet to the RTP/ICE socket. The flaw combines insufficient length checks on inbound packets with a catch-all exception handler that closes the entire channel instead of dropping the offending packet, causing immediate session teardown. There is no confidentiality or integrity impact, and a vendor‑released patch is available in version 10.0.9.

Bearer token leak in the OAuth2 Ruby gem (ruby-oauth/oauth2) versions 0.4.0 through 2.0.

2-3 sentence plain-language summary ... Start with specific impact verb and product. e.g., 'Cross-origin sig

Memory exhaustion vulnerability in TinyWeb HTTP server (through 0.0.8) enables unauthenticated remote attackers to cause denial of service by sending ordinary HTTP requests. A memory leak in the request parser allocates objects without freeing them, consuming approximately 20–28 kB per request until the worker process is killed. Publicly available exploit code exists, but no active exploitation has been confirmed via CISA KEV.

Denial of service and information disclosure in NVIDIA DCGM Exporter allows remote unauthenticated attackers to consume server resources and potentially read runtime profiling data. The vulnerability resides in the /debug/pprof endpoints, which lack resource limits, enabling concurrent profiling requests to exhaust CPU and memory. No active exploitation has been observed, but the attack vector is network-accessible without credentials, earning a CVSS 8.2 score.

Local privilege escalation in ArkSigner Desktop Client versions 2.2.16.10 through 17062026 allows authenticated attackers to execute arbitrary code via search order hijacking. A low-privileged local user who can place a malicious DLL in a directory that the application searches before the legitimate one, or convince a victim to open a file from such a location, can achieve full system compromise. No public exploit or active exploitation has been reported, but the TR-CERT advisory confirms the vulnerability.

Joomdle component for Joomla versions below 3.1.1 ships with an insecure default configuration that allows unauthenticated remote attackers to read CMS user account details and perform password resets, effectively enabling account takeover. The flaw is confirmed by the Joomla security team and tracked in ENISA EUVD, though no indicators of active exploitation are present at this time.

Information disclosure in the Xen hypervisor's DM_OP (device model operation) hypercall handling allows a device model caller to leak uninitialized hypervisor stack memory because certain operations do not verify that the required number of buffers was supplied before reading them. Affected Xen builds process DM_OP requests using structures that may remain uninitialized ('stack rubble'), disclosing low-value memory contents (CWE-665) with limited integrity and availability side effects. No public exploit has been identified at time of analysis; SSVC records exploitation status as none, EPSS is low (0.26%, 18th percentile), and it is not on CISA KEV.

A divide-by-zero vulnerability in Xen's Viridian periodic STIMER handling allows an attacker with guest VM access to crash the hypervisor, causing denial of service. The issue arises from an unchecked user-controlled divisor that can be set to zero, triggering a #DE fault. No active exploitation is known per SSVC, though the attack is automatable and requires no guest-level privileges.

Information disclosure in Xen hypervisor's CMOS emulation allows a guest VM to exploit a race condition in the index caching mechanism, leading to an out-of-bounds read of hypervisor memory. A malicious guest can repeatedly manipulate the CMOS index port while the hypervisor processes an access, potentially leaking sensitive data from the host or other VMs. No active exploitation or public exploit code is known at this time.

A local time-of-check/time-of-use (TOCTOU) race in the Xen hypervisor's grant-table copy handling lets a provisioned guest domain subvert the permission check that is supposed to gate a grant-copy operation, so the check can be performed against one guest frame while the actual copy targets a different frame. Only guests able to issue GNTTABOP_copy operations - a standard capability for PV/HVM guests doing grant-based I/O - are affected, and the attacker must win a narrow timing window in which the referenced grant is simultaneously pinned by another mapping or copy (reflected in the CVSS AC:H rating); it is not remotely reachable and requires guest-level privilege. Given the local attack vector, the required race, and an EPSS score of 0.10% (1st percentile), this is a genuine hypervisor-level confidentiality and integrity flaw but not an urgent widespread-exploitation priority; no public exploit has been identified at time of analysis and CISA SSVC records exploitation as 'none'.

Denial-of-service in Xen's Xenstore component allows unprivileged guest domains to crash the host by triggering a bitmap teardown in an error path of the XEN_DOMCTL_get_domain_state operation. Exploit code is publicly available, though no active exploitation is confirmed. The attack is automatable, requiring no user interaction or guest authentication.

Identity header smuggling in OpenShift Container Platform 4.x allows authenticated low-privilege users to escalate privileges by injecting forged identity headers that upstream applications may trust. The oauth-proxy fails to strip underscore-variant headers, enabling WSGI and PHP frameworks to normalize them into the legitimate identity, potentially overriding the true authenticated user. No known active exploitation or public exploit code has been identified.

Unauthenticated read and write access to sensitive filesystem areas in SICK AppEngine's file access feature allows remote attackers to extract customer-defined passwords, modify application settings, and execute arbitrary Lua code within the sandboxed environment. The vulnerability stems from improper access restrictions on an HTTP-based file access endpoint, which exposes a critical directory without requiring credentials. At the time of analysis, no public exploit or active exploitation (KEV) has been confirmed, but the CVSS 9.4 score reflects the ease of exploitation and high impact.

Password overwrite and administrative unavailability on an unspecified

Heap-based buffer overflow in ESP32-audioI2S version 3.4.5 allows remote attackers to execute arbitrary code, disclose information, crash the service, or escalate privileges by sending a malicious URL with an oversized path and query string to the vulnerable urlencode function. No active exploitation has been confirmed by CISA KEV, and no EPSS score is available at this time.

Heap-based buffer overflow in ESP32-audioI2S 3.4.5 allows remote attackers to cause denial of service, information disclosure, or arbitrary code execution via a crafted MP3 file. Public exploit code is available but no active exploitation is confirmed.

Out-of-bounds read in macOS allows a malicious app to trigger unexpected system termination. Patches are available in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. No active exploitation or public exploit code has been identified, and EPSS indicates low probability of widespread exploitation.

Kernel memory corruption via race condition in Apple OS allows a malicious app to write arbitrary kernel memory or cause unexpected system termination. The issue affects iOS, iPadOS, macOS, and watchOS versions prior to the June 2026 security fixes, and has been patched by Apple. No public exploit or active exploitation is known, and EPSS indicates a low probability of widespread exploitation at this time.

Unexpected system termination in macOS prior to Sequoia 15.7.8, Sonoma 14.8.8, or Tahoe 26.6 allows a local application to trigger a denial-of-service via an out-of-bounds read. No active exploitation or public exploit is known, and EPSS indicates a low exploitation probability. The high CVSS score likely overstates the risk, as only a crash is confirmed in the description.

Information disclosure in Apple macOS (Sonoma before 14.8.8 and Tahoe before 26.6) allows an app to bypass access restrictions and reach user-sensitive data due to a CWE-284 improper access control flaw. Apple has shipped fixes and the CVSS 8.6 rating reflects high confidentiality impact, but EPSS is low (0.14%, 4th percentile) and CISA SSVC shows no observed exploitation. No public exploit is confirmed in the intelligence, though a referenced 'it's a pre-auth' writeup and 'Authentication Bypass' tag hint at a bypass primitive worth verifying.

Unexpected system termination and kernel memory corruption in macOS allows remote attackers to fully compromise a machine. The race condition (CWE-362) is triggered without authentication or user interaction, and Apple has released fixes in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. No active exploitation or public exploit is confirmed, and EPSS indicates a low probability of real-world attacks.

A race condition in Apple operating systems (iOS, iPadOS, macOS, tvOS, watchOS) fixed in version 26.6 allows a local malicious app to cause unexpected system termination, resulting in a denial-of-service condition. No evidence of active exploitation or public exploit code exists, and EPSS indicates very low exploitation probability (0.16%). The NVD-assigned CVSS 9.8 appears inconsistent with the actual impact, which is limited to availability.

User fingerprinting in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS allows a malicious app to collect device or user identifiers due to a permissions issue. All versions prior to the 26.6 updates are affected. No public exploit code or active exploitation has been identified, and EPSS indicates a low 0.15% probability of exploitation.

Out-of-bounds read in macOS allows an attacker to crash applications and potentially access sensitive memory by tricking a user into opening a maliciously crafted file. Affecting macOS Son

Type confusion in macOS and tvOS may allow a malicious app to trigger unexpected system termination and potentially achieve arbitrary code execution with kernel-level privileges. The issue is addressed in macOS Tahoe 26.6 and tvOS 26.6; no active exploitation or public proof-of-concept is known at the time of analysis.

Improper validation of environment variables in macOS enables a local application to trigger unexpected system termination, causing a denial-of-service condition. The vulnerability affects macOS versions prior to Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. No active exploitation or public exploit has been identified, and the EPSS score is very low at 0.16%.

Local privilege escalation in macOS Sonoma 14.x before 14.8.8 and Sequoia 15.x before 15.7.8 allows a malicious app to gain elevated system privileges via a race condition. Apple has released patches, and no active exploitation or public proof-of-concept has been identified at this time.

Mounting a maliciously crafted disk image on macOS may cause unexpected system termination or corrupt kernel memory. Affected versions include macOS Sequoia prior to 15.7.8, macOS Sonoma prior to 14.8.8, and macOS Tahoe prior to 26.6. The vulnerability is an out-of-bounds read in the kernel's disk image handling, exploitable by a locally authenticated user with no privileges beyond the ability to mount a disk image.

Remote attackers can cause unexpected application termination and potentially read sensitive memory on affected Apple devices. This out-of-bounds read vulnerability, tracked as CVE-2026-64768, affects iOS, iPadOS, macOS, tvOS, and visionOS due to insufficient input validation. No active exploitation or public proof-of-concept code has been identified.

Information disclosure in Apple Safari and OS-integrated WebKit allows websites to detect if a user has visited specific URLs. Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS prior to version 26.6 are affected. No public exploit code or active attacks have been reported, and the probability of exploitation is very low (EPSS 0.17%).

Integrity modification in macOS Keychain allows remote unauthenticated attackers to modify Keychain state via a race condition. This vulnerability (CVE-2026-43728) is fixed in macOS Tahoe 26.6, with no known active exploitation but automatable according to SSVC. While CVSS rates it high severity, EPSS indicates very low likelihood of near-term exploitation.

A data protection flaw in multiple Apple operating systems allows a locally-installed app to fingerprint the user. An attacker can use this information disclosure vulnerability to track the user’s identity across different contexts, violating privacy. The issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6, and no active exploitation or public exploit code has been observed.

A type confusion vulnerability in macOS allows an application to cause unexpected system termination (denial of service). Affected versions include macOS Sequoia, Sonoma, and Tahoe prior to the fixed releases; the issue has been patched by Apple. No public exploit is known, and EPSS indicates very low exploitation probability, with no active exploitation reported.

Privilege escalation in macOS versions prior to Sequoia 15.7.8 and Tahoe 26.6 allows a local authenticated attacker to gain elevated privileges. The vulnerability carries a CVSS 7.8 high severity but has a low EPSS exploitation probability (0.17%) and no active exploitation or public exploit known. Apple addressed the logic flaw with improved restrictions.

We are to produce a JSON object with the required fields, synthesizing all available data. Input data: - CVE: CVE-2026-64762 - Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination. - CVSS: 9.8, vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CWE: CWE-125 (Out-of-bounds Read) - EPSS: 0.15% (percentile 5%), so low exploitation probability. - Patch: Available from vendor - Tags: Apple, Buffer Overflow, Information Disclosure (but CWE is CWE-125, not buffer overflow. Tags may be inaccurate. Description says out-of-bounds read, not buffer overflow. We'll note CWE.) - SSVC: Exploitation: none, Automatable: yes, Technical Impact: total - ENISA EUVD: ID EUVD-2026-49480, affected versions: macOS 0 <14.8.8, macOS 0 <26.6, macOS 0 <15.7.8. Note: "macOS 0" probably means all versions before those fixes, including Sonoma 14.x before 14.8.8, sequoia before 15.7.8, Tahoe before 26.6. But product is macOS. - References: three Apple support articles. Those likely contain patch info. - CPE: cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:* No KEV mention, so not actively exploited. POC status unknown. So exploitation status: "no public exploit identified at time of analysis" unless there is POC flag, but data says Tags: Apple, ... no mention of POC. I'll assume no public exploit. Now, for each field, construct strings per instructions. product_name: "macOS" (just 3 words? "macOS" is one word. Could be "Apple macOS", but instructions say product name only, not vendor. So "macOS" is fine.) summary: Must not copy or paraphrase description. Synthesize. Provide impact, product, and what attacker can do. Start with specific impact verb and product. Options: "Unexpected system termination in macOS through out-of-bounds read allows...". But description says an app may cause unexpected system termination. So local app can crash the syst

Out-of-bounds read in Apple Safari's web content processing can crash the browser and potentially leak sensitive memory contents. This vulnerability affects all Apple platforms where Safari rendering is used and is fixed in Safari 26.6, iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Exploitation requires user interaction to visit a malicious site; no known active exploits or public proof-of-concept exist.

Local privilege escalation in Apple macOS allows a low-privileged application to gain root privileges by exploiting a race condition in system state management. The issue is resolved in macOS Sonoma 14.8.8 and macOS Tahoe 26.6. No active exploitation has been reported, but the local attack vector limits remote risk.

Denial-of-service in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS allows a malicious app to trigger an out-of-bounds read, causing app crashes or system instability. The

Privilege escalation in macOS via race condition allows a low-privileged local app to gain root privileges. The issue, tracked as CVE-2026-43693, was addressed with improved state handling and is fixed in the latest OS updates. No active exploitation has been reported and exploitation requires a local user account with high attack complexity, limiting immediate risk.

Unexpected system termination due to memory initialization flaw in Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS allows a malicious application to forcibly crash the device. All versions prior to the listed fixed releases are affected. No active exploitation or publicly available exploit code was identified at time of analysis; EPSS indicates a low (0.16%) probability of exploitation.

Guest-to-host state corruption in the Linux kernel's arm64 KVM nested-virtualization (NV) support arises because kvm_hyp_handle_mops() writes an untranslated synthetic CPSR value directly into hardware when rewinding single-step state after a MOPS (FEAT_MOPS memory copy/set) exception. On systems running a nested guest at virtual EL2, this bypasses the vEL2-to-hardware translation, leaving SPSR_EL2 with an invalid exception-return state that the host later consumes. The fix modifies SPSR_EL2 directly and defers resynchronization to the next full exit. There is no public exploit identified at time of analysis; EPSS is very low (0.17%, 6th percentile) and it is not in CISA KEV.

Use-after-free write in the Linux kernel's bridge netfilter IPv6 fragmentation path (br_ip6_fragment) lets an adjacent attacker corrupt kernel memory and crash the host. The flaw affects systems acting as bridges with connection-tracking (nf_conntrack_bridge) forwarding IPv6 traffic, where a stale prevhdr pointer is dereferenced after skb_checksum_help() reallocates the skb head for a cloned packet. There is no public exploit identified at time of analysis and it is not in CISA KEV; the reported KASAN trace demonstrates a reliable kernel panic (denial of service), with memory-corruption escalation theoretically possible.

Uninitialized kernel memory disclosure in the Linux kernel SCTP stack allows a remote peer to leak stale kernel heap/stack bytes by sending a malformed ERROR chunk carrying a STALE_COOKIE cause. When an association is in the COOKIE_ECHOED state, sctp_sf_do_5_2_6_stale() reads a 4-byte 'Measure of Staleness' from the first cause in the chunk without verifying that the field is actually present, and echoes that value back to the peer in the Cookie Preservative of the reply INIT. It is reachable by any peer - including an unprivileged local process using a raw SCTP socket inside a user+network namespace - and there is no public exploit identified at time of analysis (EPSS 0.18%, not in CISA KEV).

Local privilege escalation and kernel memory corruption in the Linux kernel's TIPC subsystem occurs because bearer_disable() frees the discoverer object (b->disc) with a plain kfree() via tipc_disc_delete(), while tipc_disc_rcv() still dereferences it in RX softirq under rcu_read_lock(); for UDP bearers the synchronize_net() grace period is deferred to a workqueue, so the object is freed with no RCU protection. The flaw is reachable from an unprivileged user namespace because the TIPCv2 generic-netlink family is netnsok and its bearer commands carry no GENL_ADMIN_PERM, requiring only that the kernel be built with CONFIG_TIPC and CONFIG_TIPC_MEDIA_UDP. No public exploit is identified at time of analysis and EPSS is low (0.17%, 6th percentile), but the KASAN-confirmed use-after-free yields a high-impact memory-corruption primitive affecting confidentiality, integrity and availability.

Use-after-free in the Linux kernel's SMC-R (Shared Memory Communications over RDMA) subsystem allows a race between the CDC receive tasklet and socket close to operate on freed memory, enabling a kernel crash and potential memory corruption on hosts using SMC-R. The flaw lives in smc_cdc_rx_handler(), which looks up a connection under conns_lock, releases the lock, and then dereferences the socket via sock_hold() in smc_cdc_msg_recv() without holding a reference across the window. It affects only systems that have SMC-R enabled and active; there is no public exploit identified at time of analysis and EPSS is low (0.18%, 7th percentile).

Privilege escalation in JFrog Artifactory allows low-privileged authenticated users to forge administrator JWTs by exploiting missing signature validation on refresh tokens. An attacker with any user account can gain full admin control, rated CVSS 8.8. No active exploitation or public exploit is confirmed at this time.

Exposure of privileged authorization material in JFrog Artifactory allows an authenticated low-privileged user to obtain tokens or credentials, leading to full compromise of the instance. The flaw stems from an event-handling weakness and can be triggered under specific, undisclosed conditions. No public exploit or active exploitation has been reported.

Information disclosure and denial of service in GIMP's file-icns plugin allow local attackers to leak heap memory contents via a crafted ICNS image file. When processing a truncated mask resource, the plugin performs an out-of-bounds read, leaking heap data as alpha channel pixel values or crashing the application. User interaction is required to open the malicious file.

Unauthenticated remote attackers can inject arbitrary events into mTLS-protected event streams in Event-Driven Ansible (EDA) server by spoofing the Subject HTTP header, bypassing mTLS authentication. The vulnerability arises from permissive access controls on the ExternalEventStreamViewSet and reliance on an untrusted Subject header, combined with leakage of the expected Distinguished Name in error responses. No active exploitation or public exploit is confirmed at this time, but the high integrity impact and low attack complexity make it a significant risk.

Denial of service in Apache ActiveMQ's AMQP NIO connector allows remote unauthenticated attackers to exhaust the NIO thread pool by sending a crafted negative frame size value, causing legitimate connection disruption. Affects ActiveMQ versions before 5.19.9 and 6.x before 6.2.8. No known active exploitation, but rated moderate by the vendor due to network exposure.

Denial-of-service in facil.io HTTP/1.1 chunked transfer encoding parser allows remote unauthenticated attackers to crash the server by sending a negative chunk size. Affected versions 0.7.5 through 0.7.6; a public proof-of-concept exploit exists, but no active exploitation (not in CISA KEV) is confirmed. Attackers can trigger the vulnerability without authentication, causing an out-of-bounds read and server crash.

Remote denial-of-service in facil.io through version 0.7.6 allows unauthenticated attackers to crash worker processes by sending a crafted POST request with an empty Content-Disposition header field name. A public proof-of-concept exploit exists. The integer underflow in http_mime_parser.h causes an out-of-bounds memory read and bus fault, resulting in immediate server disruption.

OS command injection in NVIDIA NeMo for Linux allows a local authenticated attacker to execute arbitrary commands, leading to full system compromise (code execution, privilege escalation, data tampering, and information disclosure). No public exploit code or active exploitation has been identified at the time of analysis.

Sensitive information disclosure in the Byteflows Travel & Hotel Booking plugin for WordPress allows unauthenticated remote attackers to read sensitive system data. The vulnerability affects plugin versions up to 1.0.0 and exposes information that could aid further attacks. No public exploit or active exploitation has been reported at time of analysis.

Price manipulation in the Booking and Rental Manager WordPress plugin (versions <=2.7.2) allows unauthenticated attackers to modify booking prices due to improper validation of input quantities (CWE-1284). The vulnerability enables remote attackers to alter pricing without authentication or user interaction, potentially leading to financial loss or fraudulent bookings. No evidence of active exploitation or publicly available exploit code exists at time of analysis.

Unspecified vulnerability in the Falcon - WordPress Optimizations & Tweaks plugin up to version 2.10.0 allows remote, unauthenticated attackers to cause a denial of service due to improper input validation (CWE-1284). The high-severity flaw (CVSS 7.5) impacts availability with no user interaction required. No public exploit or active exploitation has been confirmed, and EPSS data is unavailable.

Sensitive data exposure in the Ebook Store plugin for WordPress versions 6.19 and below allows unauthenticated remote attackers to access confidential information via missing authorization checks. The vulnerability, reported by Patchstack, affects installations of the plugin where the default, unauthenticated endpoint is exposed, leading to high confidentiality impact. No public exploit or active exploitation has been identified at this time.