A critical command injection vulnerability exists in TOTOLINK A950RG firmware version 4.1.2cu.5268_B20221104. The flaw affects the getDeviceInfo function related to the /var/lib/misc/udhcpd.leases file in the device-information handler. An attacker with high privileges can remotely manipulate the MAC address argument to execute arbitrary commands. Public exploit code is available, increasing the risk of exploitation.
A critical command injection vulnerability exists in the apmib_set function of the firewall.so file in TOTOLINK A950RG version 4.1.2cu.5268_B20221104. This vulnerability can be exploited remotely and has been publicly disclosed. It allows an attacker with low privileges to execute arbitrary commands, potentially leading to full system compromise.
A critical command injection vulnerability exists in TOTOLINK A950RG firmware version 4.1.2cu.5268_B20221104. The flaw is in the setCloudUpgradeFW function of the Cloud Upgrade component, allowing remote attackers to execute arbitrary commands via the FileName argument. Public exploit code is available, increasing the risk of exploitation.
A logic issue in Safari and related Apple operating systems was fixed by improved checks. The flaw allowed websites to use a media format that should be restricted when Lockdown Mode is enabled. The issue is resolved in Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, and macOS Golden Gate 27.2.
A vulnerability in macOS Golden Gate allows an app to cause unexpected system termination or corrupt kernel memory due to improper memory handling. This issue has been fixed in macOS Golden Gate version 27.2 with improved memory management.
An out-of-bounds read vulnerability in macOS Golden Gate 27.2 was addressed by improved bounds checking. The flaw could allow an application to cause unexpected system termination. The issue is fixed in macOS Golden Gate 27.2.
An out-of-bounds read vulnerability in macOS Golden Gate 27.2 was addressed by improved bounds checking. This flaw could allow an application to cause unexpected system termination. The issue is fixed in macOS Golden Gate 27.2.
An out-of-bounds read vulnerability in macOS Golden Gate 27.2 was addressed by improving bounds checking. The flaw could allow an application to cause unexpected system termination. This issue is fixed in macOS Golden Gate 27.2.
A vulnerability in macOS Golden Gate 27.2 allows unpacking of maliciously crafted archives that may cause unexpected application termination or arbitrary code execution. The issue is addressed by improved access restrictions and fixed in version 27.2.
CVE-2026-113949 is a type confusion vulnerability in Safari and related Apple operating systems that was addressed by improved state management. The flaw could allow processing of maliciously crafted web content to cause memory corruption. The issue is fixed in Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, and visionOS 27.2.
An out-of-bounds read vulnerability in macOS Golden Gate was addressed by improved bounds checking. This flaw could allow an application to cause unexpected system termination or read kernel memory. The issue is fixed in macOS Golden Gate version 27.2.
CVE-2026-113944 is an out-of-bounds read vulnerability in macOS Golden Gate that could allow an application to cause unexpected system termination or read kernel memory. The issue has been fixed in macOS Golden Gate version 27.2 with improved bounds checking.
CVE-2026-113939 is an out-of-bounds write vulnerability in macOS Golden Gate that could be triggered by mounting a maliciously crafted disk image. This flaw may cause unexpected system termination or kernel memory corruption. The issue has been fixed in macOS Golden Gate version 27.2 with improved bounds checking.
An out-of-bounds read vulnerability in macOS Golden Gate was addressed by improved bounds checking. This flaw could allow an application to cause unexpected system termination or read kernel memory. The issue is fixed in macOS Golden Gate version 27.2.
An out-of-bounds write vulnerability in macOS Golden Gate was fixed by improving bounds checking. This flaw could allow an application to cause unexpected system termination or corrupt kernel memory. The issue is resolved in macOS Golden Gate version 27.2.
An out-of-bounds read vulnerability was fixed in macOS Golden Gate 27.2 by improving bounds checking. This flaw could allow an application to cause unexpected system termination.
A race condition vulnerability was addressed by adding additional validation in multiple Apple operating systems. The flaw could allow an app to access sensitive user data. The issue is fixed in iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.
An out-of-bounds read vulnerability in macOS Golden Gate 27.2 could allow an application to cause unexpected system termination. The issue has been fixed with improved bounds checking in version 27.2.
An out-of-bounds write vulnerability in macOS Golden Gate was fixed by improving bounds checking. Exploiting this flaw by mounting a maliciously crafted disk image could cause unexpected system termination or kernel memory corruption. The issue is resolved in macOS Golden Gate version 27.2.
CVE-2026-113948 is a permissions vulnerability in macOS Golden Gate that allowed an app to modify protected parts of the file system. The issue was addressed by adding additional restrictions and is fixed in macOS Golden Gate version 27.2.