CVE-2026-122310 is a critical vulnerability in Kyverno versions 1.19.1 up to but not including 1.19.2. It arises from a discrepancy between how Kyverno validates and executes the Policy's context.apiCall urlPath, allowing a namespace-scoped user with Policy creation rights to exploit URL fragments or queries to access cluster-scoped endpoints with elevated privileges. This can lead to cluster admin access.
Kyverno versions prior to 1.19.2 contain a denial of service vulnerability where namespace-scoped policy authors can cause uncontrolled resource consumption. By submitting CEL expressions with nested map comprehensions over large ConfigMap fields, attackers can exhaust CPU and memory resources, potentially causing Kyverno pods to be OOM-killed and blocking cluster-wide admission.
Kyverno versions before 1.19.2 contain an authorization bypass vulnerability in the Generation Handler. This flaw allows users with create or update permissions to spoof internal labels and trigger synchronized generate policies. Exploitation can enable attackers to label a ConfigMap as managed by Kyverno with crafted labels, potentially cloning sensitive Secrets from restricted namespaces into their own namespace.
Kyverno versions before 1.19.2 have a policy bypass vulnerability in the admissionpolicygenerator controller. This flaw allows users with namespaced create rights on PolicyExceptions to inject negated matchConditions into generated ValidatingAdmissionPolicies, bypassing cluster-wide enforcement. The vulnerability arises because PolicyExceptions are folded into generated policies without respecting certain gates such as --enablePolicyException, --exceptionNamespace, and policy kind gates. The issue is fixed in Kyverno version 1.19.2.
Kyverno versions before 1.19.2 contain a denial of service vulnerability due to inefficient algorithmic complexity. This flaw allows namespaced policy authors to exhaust the admission controller's CPU by submitting specially crafted wildcard patterns in policies. The vulnerability causes cluster-wide webhook timeouts that block resource operations.
Kyverno versions before 1.19.2 contain a denial of service vulnerability caused by an infinite loop in the substituteVariablesIfAny function. This flaw allows low-privileged users to create resources with self-referential variable templates in annotations, triggering unbounded substitution loops. The resulting infinite loop exhausts CPU and memory resources, causing the admission webhook to hang and blocking cluster-wide admission processes.
Kyverno versions from 1.17.0 up to but not including 1.19.2 contain an authorization bypass vulnerability. This flaw allows namespace administrators to escape their namespace confinement due to the cleanup controller using a nil policy context loader. Exploiting this, attackers can create namespaced CleanupPolicy resources with specific context entries to read Secrets across namespaces and modify validating webhook configurations using the cleanup controller's ServiceAccount.
Kyverno versions from 1.17.0 up to but not including 1.19.2 contain an authorization bypass vulnerability. This flaw allows namespace tenants to overwrite resources in other namespaces by exploiting the NamespacedMutatingPolicy mutate-existing targetMatchConstraints.expression. An attacker can craft a CEL map literal that fabricates a target with an attacker-chosen metadata.namespace, enabling the privileged background controller to overwrite critical cluster-wide resources such as Secrets, Deployments, or policies. The vulnerability is rated critical with a CVSS 4.0 score of 9.4 and has been fixed in version 1.19.2.
Kyverno versions before 1.19.2 have a privilege escalation vulnerability that allows namespace administrators to create resources beyond their assigned RBAC permissions. This occurs because generate-rule admission checks validate the controller's permissions rather than the resource author's. As a result, attackers can craft namespaced Policies with generate rules targeting other namespaces or cluster-scoped resources, causing the background controller to create or clone resources cluster-wide.
CVE-2026-122301 is a vulnerability in parse-community's parse-server where versions before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 improperly expose field values in object creation responses to callers without read access. This occurs due to the server returning data set by Cloud Code triggers, schema defaults, and class default ACLs even when the caller lacks permission. An attacker with create permission can exploit this to access sensitive information.
CVE-2025-66365 is a vulnerability in the Samsung Semiconductor Exynos 1080 chipset caused by improper handling of SIP packets, leading to baseband crashes. The issue is categorized under CWE-754, indicating an improper check for unusual or exceptional conditions. A fix for this vulnerability was released in October 2026.
A weakness has been identified in Edge0-AI Audio8_TTS up to 1d64afcc2da56222b41ddcf53de7b8bc54be1fb6. This affects the function ArkTtsRuntime.__init__ of the file onnx_runtime_0_1b_int8/arktts_runtime/runtime.py of the component Model Path Resolution. Executing a manipulation of the argument slow_decode_models can lead to path traversal. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Hackers linked to Russia's Foreign Intelligence Service exploited previously patched vulnerabilities in iOS and Android devices to target visitors of multiple websites, including a site celebrating American independence and a luxury UK hotel near sensitive government institutions. The attackers used JavaScript injection, proxy domains, and a compromised Ukrainian web analytics service to deliver three zero-click exploit chains, including the DarkSword iOS exploit kit. The attacks aimed to steal browser cookies, Wi-Fi passwords, and device data from diplomatic and high-profile targets related to Ukraine.
A security flaw has been discovered in InvoiceShelf up to 2.4.3/3.0.0-alpha.3. Affected by this issue is the function MemberService::create of the file app/Domains/Accounts/Application/MemberService.php. Performing a manipulation of the argument companies[].id/companies[].role results in improper access controls. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.4.4 and 3.0.0-alpha.4 can resolve this issue. The patch is named c798b513c3ab6e672a1678774720fbb282f4d0c6. It is recommended to upgrade the affected component.
A vulnerability was identified in Purocean Yank Note 3.93.0. Affected by this vulnerability is the function checkPermission of the file src/main/server/index.ts of the component Terminal Handler. Such manipulation leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. Upgrading to version 3.93.1 addresses this issue. The name of the patch is 59f85d48f17a70a402ad59dcecacdbec20f954df. Upgrading the affected component is recommended.
This content summarizes Snapchat's data retention and deletion policies for Snaps and Chats. Snaps and Chats are generally deleted automatically after viewing or expiration, with configurable retention settings. Content shared with Snapchat's AI is stored until deleted by the user, and public Topic Chats are retained for five years. Users can save or delete messages, which affects retention. Snapchat warns that recipients can save messages via screenshots or other capture methods. No direct security vulnerability or exploit is described.
CVE-2025-66364 is a vulnerability in the Samsung Semiconductor Exynos 850 chipset where continuously sending control-plane messages causes the baseband to crash. This is due to an improper check for unusual or exceptional conditions (CWE-754). A fix was released in October 2026.
A vulnerability was found in purocean Yank Note 3.93.0. This impacts the function config.getAll of the file src/main/server/index.ts of the component Settings Endpoint. The manipulation results in information disclosure. The attack may be launched remotely. The exploit has been made public and could be used. Upgrading to version 3.93.1 will fix this issue. The patch is identified as 59f85d48f17a70a402ad59dcecacdbec20f954df. The affected component should be upgraded. The commit removes the key from the response.
A vulnerability in the gopacket library's SCTP chunk sub-decoder can cause out-of-bounds panics when processing specially crafted SCTP segments. This issue is identified as CWE-125 (out-of-bounds read). The affected version is exactly 3.0. No CVSS score or patch information is provided.
CVE-2026-119566 is a vulnerability in Prometheus up to version 3.15.1 involving credential leakage via remote_write cross-host redirects. The issue relates to improper handling of remote_write requests that can lead to exposure of sensitive credentials. The affected version explicitly stated is 3.0. No CVSS score or detailed impact metrics are provided.
