Threat database

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination.

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.

CVE-2026-84560 is a vulnerability in Apple iOS and iPadOS where an app may gain unauthorized access to Bluetooth due to an authorization issue. This issue was addressed with improved state management and fixed in iOS 27 and iPadOS 27. The vulnerability has a medium severity with a CVSS score of 6.1.

CVE-2026-84537 is a vulnerability in Apple macOS where an application may cause unexpected system termination or corrupt kernel memory. The issue is related to improper memory handling and has been addressed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. The vulnerability has a medium severity rating with a CVSS score of 6.6.

CVE-2026-84521 is a use-after-free vulnerability in Apple iOS and iPadOS that could allow an app to cause unexpected system termination. The issue was addressed with improved memory management and fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, and related macOS and visionOS versions. The vulnerability has a medium severity rating with a CVSS score of 5.5 and does not impact confidentiality or integrity but affects availability.

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product.

CVE-2026-65367 is a vulnerability in Apple iOS and iPadOS where a null pointer dereference could allow an app to cause unexpected system termination. This issue has been addressed with improved input validation and fixed in iOS 18.7.9, iPadOS 18.7.9, iOS 26.5, and iPadOS 26.5. The vulnerability does not impact confidentiality or integrity but can cause denial of service by crashing the system.

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.

CVE-2026-43657 is a low-severity vulnerability in Apple iOS and iPadOS where a malicious app could enumerate installed apps due to a permissions issue. This issue has been addressed with additional restrictions and fixed in iOS 26.5 and iPadOS 26.5. The vulnerability allows limited information disclosure but does not impact integrity or availability.

CVE-2026-43670 is a high-severity vulnerability in Apple Safari where processing maliciously crafted web content may bypass the Content Security Policy (CSP) specifically in AudioWorklet contexts. This issue could allow attackers to circumvent CSP protections, potentially leading to unauthorized code execution or data exposure. Apple addressed this vulnerability with improved enforcement in Safari 26.5, iOS 18.7.9, iPadOS 18.7.9, iOS 26.5, iPadOS 26.5, and macOS Tahoe 26.5.

CVE-2026-43679 is a low-severity vulnerability in Apple watchOS that allows an attacker with physical access to a locked Apple Watch to view user contacts. The issue was addressed by improving permissions checking and is fixed in watchOS version 26.4.

CVE-2026-20679 is a medium severity vulnerability in Apple macOS where processing a maliciously crafted file may cause unexpected application termination. The issue has been addressed with improved checks and fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.

CVE-2026-64773 is a vulnerability in Apple container software where an attacker who can access a container's published TCP port may cause the host's forwarding process to buffer an unlimited amount of data from that client. This buffering can persist for the duration of the backend container connection, with no limit on data accumulation or wait time. The issue is fixed in container version 1.2.0.

CVE-2026-43798 is a critical vulnerability in Apple swift-nio-ssh where a single crafted SSH message allows an unauthenticated network attacker to perform an out-of-bounds stack write with attacker-controlled length and content. This flaw affects any application built on swift-nio-ssh versions prior to 0.14.1 and can lead to severe impacts including confidentiality, integrity, and availability compromise. The vulnerability is addressed in swift-nio-ssh version 0.14.1.

An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active connections until the process restarts. This vulnerability is addressed in swift-nio version 2.101.0.

A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0.