Search: management.as

A vulnerability in Apple iOS and iPadOS allowed an app to read the device's name due to an authorization issue. This flaw was addressed by improved state management and fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2.

CVE-2026-86946 is a use-after-free vulnerability in Apple macOS that could allow an application to cause unexpected system termination or corrupt kernel memory. This issue has been addressed with improved memory management and fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

A use-after-free vulnerability in Apple iOS, iPadOS, macOS Golden Gate, tvOS, visionOS, and watchOS could allow an app to cause unexpected system termination or write kernel memory. This issue has been addressed with improved memory management and fixed in version 27.2 of these operating systems.

A use-after-free vulnerability in Apple macOS could allow an application to cause unexpected system termination. This issue has been addressed with improved memory management and is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

CVE-2026-112623 is a use-after-free vulnerability in Apple Safari that could allow arbitrary code execution when processing maliciously crafted web content. The issue was addressed by improved memory management and fixed in Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, and visionOS 27.2. The vulnerability has a high severity rating with a CVSS score of 8.8.

CVE-2026-112438 is a high-severity vulnerability in Apple macOS that allows an unprivileged attacker to execute arbitrary code with root privileges due to a logic issue. This flaw was addressed by Apple through improved state management and is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

A use-after-free vulnerability in Apple Safari was addressed through improved memory management. Processing maliciously crafted web content could cause an unexpected process termination. The issue is fixed in Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, and visionOS 27.2.

CVE-2026-112615 is a use-after-free vulnerability in Apple Safari that could cause an unexpected process termination when processing maliciously crafted web content. The issue has been addressed with improved memory management and fixed in Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.

A use-after-free vulnerability in Apple Safari could allow arbitrary code execution when processing maliciously crafted web content. This issue has been addressed with improved memory management and fixed in Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, and visionOS 27.2.

A vulnerability in Apple macOS allows an app to read sensitive location information due to an authorization issue. This flaw was addressed by improved state management and fixed in macOS versions 27.2 and 26.7.2.

A use-after-free vulnerability in Apple Safari could allow arbitrary code execution when processing maliciously crafted web content. This issue has been addressed with improved memory management and fixed in Safari 27.2 and related OS versions.

CVE-2026-116482 is a cross-site scripting (XSS) vulnerability in the subhajitkhan online-clinic-management-system affecting the patientregistration.php file. The flaw arises from improper sanitization of the pat_name argument, allowing remote attackers to inject malicious scripts. The vulnerability has been publicly disclosed, and exploit code may be available. The product does not use versioning, so specific affected or fixed versions are not identified.

CVE-2026-116471 is a medium severity vulnerability in BKWLD Decoy versions 5.11.0 and 5.11.1. It involves improper privilege management due to manipulation of the 'role' argument in an unknown function within the Authorization Policy component (Policy.php). The flaw can be exploited remotely without user interaction. Public exploit code is available, but the vendor has not responded or issued a fix.

A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.0. This issue affects some unknown processing of the file /edit_profile of the component Profile. The manipulation of the argument first_name/last_name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-116384 is an improper authorization vulnerability in Bdtask Garage 24 Garage Management Software version 1.0. The flaw exists in the backend component and can be exploited remotely without user interaction. Public exploit code is available, but the vendor has not responded or issued a fix. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.3.

A vulnerability in the Linux kernel's memory management subsystem causes a kernel panic during boot when using a boot-time function tracer with a specific filter. The issue arises because deferred kernel page table freeing is scheduled before the workqueue system is initialized, leading to a null pointer dereference and system crash. The flaw was introduced by a commit that allowed collapsing page tables to free kernel page tables prematurely during early boot. The fix prevents scheduling deferred freeing work while the system is still booting, deferring it until the workqueue is available.

A vulnerability in the Linux kernel Bluetooth management subsystem caused pending commands flushed on power off to report incorrect success status instead of the actual error status. This could lead to user-space components like bluetoothd misinterpreting the device state, potentially causing crashes.