Threat Intelligence Database

CVE-2026-75089 is a medium severity SQL injection vulnerability in PHPGurukul Complaint Management System version 1.0. The issue exists in the user/check_availability.php file where the email parameter is improperly sanitized, allowing remote attackers to inject SQL commands. Public exploit code is available, but no official patch or remediation has been confirmed.

CVE-2026-75088 is a medium severity SQL injection vulnerability in itsourcecode Hospital Management System version 1.0. It affects the /viewbilling.php file via manipulation of the delid argument, allowing remote attackers to inject SQL commands. The vulnerability has been publicly disclosed, but no official patch or remediation guidance is currently available.

CVE-2026-28947 is a use-after-free vulnerability in WebKitGTK that can be triggered by processing maliciously crafted web content, potentially causing unexpected process crashes. The flaw was addressed by improved memory management and is fixed in iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Red Hat Enterprise Linux 9.2 also received updates to mitigate this issue. Exploitation requires tricking a user into loading malicious content, and while it primarily causes crashes, remote code execution cannot be ruled out. Mitigation includes avoiding untrusted web content and applying vendor patches where available.

CVE-2026-43658 is a high-severity vulnerability in WebKitGTK that causes an unexpected process crash when processing maliciously crafted web content due to improper memory handling. The issue has been addressed with improved memory handling and fixed in iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5, and relevant WebKitGTK packages. Exploitation requires tricking a user into loading malicious content, potentially leading to denial of service. While remote code execution is not confirmed, it cannot be ruled out. Red Hat provides updates and advises mitigation by avoiding untrusted web content or removing affected packages where feasible.

CVE-2026-43661 is a high-severity buffer overflow vulnerability affecting Apple operating systems. The issue involves improper memory handling when processing maliciously crafted images, which may lead to process memory corruption and cause denial of service. This vulnerability is fixed in iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and watchOS 26.5.

CVE-2026-28996 is a race condition vulnerability in Apple operating systems that was addressed with additional validation. The flaw could allow an app to access sensitive user data. It affects multiple Apple OS versions and has been fixed in iOS 26.5, iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. The vulnerability has a medium severity rating and no known exploits in the wild.

CVE-2026-28990 is a high-severity vulnerability involving improper memory handling when processing maliciously crafted images on Apple operating systems. This flaw could lead to process memory corruption. The issue has been addressed with improved memory handling in iOS 26.5, iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5.

CVE-2026-39872 is a medium severity vulnerability involving improper memory handling in Safari, iOS, iPadOS, and macOS Tahoe. Processing maliciously crafted web content may cause an unexpected process crash. The issue has been fixed in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2.

CVE-2026-43708 is a medium severity vulnerability related to insufficient input validation in Safari, iOS, iPadOS, and macOS Tahoe. A malicious website could exploit this flaw to exfiltrate data across origins. The issue has been fixed in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2 through improved input validation.

CVE-2026-43717 is a use-after-free vulnerability in Safari and related Apple operating systems that could cause an unexpected browser crash when processing malicious web content. The issue was addressed by improved memory management and fixed in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. The vulnerability has a CVSS score of 6.5, indicating a medium severity impact primarily affecting availability.