https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 12:34:45 +0000 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0938 certfr-2026-avi-0938 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0938 https://vulnerability.circl.lu/vuln/fkie_cve-2026-28849 <p>The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.</p> <p>The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-28849 https://vulnerability.circl.lu/vuln/gcve-1988-2026-0289 <p><strong>Affected:</strong> Apple Macos Sequoia</p> <p>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256</p> <p>APPLE-SA-07-27-2026-3 macOS Sequoia 15.7.8</p> <p>macOS Sequoia 15.7.8 addresses the following issues. Information about the security content is also available at https://support.apple.com/en-us/128071.</p> <p>Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories.</p> <p>Accounts Available for: macOS Sequoia Impact: An app may be able to gain root privileges Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-43749: Adam Franke, Trung Nguyen (@everping) of CyStack, Ashish Kunwar</p> <p>afpfs Available for: macOS Sequoia Impact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory Description: A buffer overflow was addressed with improved bounds checking. CVE-2026-64767: Dave G.</p> <p>apache Available for: macOS Sequoia Impact: A remote attacker may be able to cause a denial-of-service Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2026-23918: Юлия Мерцалова</p> <p>APFS Available for: macOS Sequoia Impact: A remote user may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling. CVE-2026-64695: Peter Malone</p> <p>App Store Available for: macOS…</p> <p><strong>Affected:</strong> Apple Macos Sequoia</p> <p>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256</p> <p>APPLE-SA-07-27-2026-3 macOS Sequoia 15.7.8</p> <p>macOS Sequoia 15.7.8 addresses the following issues. Information about the security content is also available at https://support.apple.com/en-us/128071.</p> <p>Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories.</p> <p>Accounts Available for: macOS Sequoia Impact: An app may be able to gain root privileges Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-43749: Adam Franke, Trung Nguyen (@everping) of CyStack, Ashish Kunwar</p> <p>afpfs Available for: macOS Sequoia Impact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory Description: A buffer overflow was addressed with improved bounds checking. CVE-2026-64767: Dave G.</p> <p>apache Available for: macOS Sequoia Impact: A remote attacker may be able to cause a denial-of-service Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2026-23918: Юлия Мерцалова</p> <p>APFS Available for: macOS Sequoia Impact: A remote user may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling. CVE-2026-64695: Peter Malone</p> <p>App Store Available for: macOS…</p> https://vulnerability.circl.lu/vuln/gcve-1988-2026-0289 https://vulnerability.circl.lu/vuln/ghsa-r4rg-rrj9-352x <p>The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks.</p> <p>The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks.</p> https://vulnerability.circl.lu/vuln/ghsa-r4rg-rrj9-352x https://vulnerability.circl.lu/vuln/ncsc-2026-0267 NCSC-2026-0267 https://vulnerability.circl.lu/vuln/ncsc-2026-0267 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2543 <p>Ein Angreifer kann mehrere Schwachstellen in Apple macOS Tahoe, Sonoma und Sequoia ausnutzen, um seine Privilegien zu erhöhen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Apple macOS Tahoe, Sonoma und Sequoia ausnutzen, um seine Privilegien zu erhöhen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2543