https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 13:43:42 +0000 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0938 certfr-2026-avi-0938 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0938 https://vulnerability.circl.lu/vuln/fkie_cve-2026-64740 <p>A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox.</p> <p>A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-64740 https://vulnerability.circl.lu/vuln/gcve-1988-2026-0281 <p><strong>Affected:</strong> APPLE-SA-07-27-2026-1 iOS</p> <p>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256</p> <p>APPLE-SA-07-27-2026-1 iOS 26.6 and iPadOS 26.6</p> <p>iOS 26.6 and iPadOS 26.6 addresses the following issues. Information about the security content is also available at https://support.apple.com/en-us/128066.</p> <p>Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories.</p> <p>Accessibility Available for: iPhone 11 and later Impact: An attacker with physical access may be able to access sensitive user data during iPhone Mirroring Description: This issue was addressed through improved state management. CVE-2026-64732: Jorge Welch (@jorgwelch)</p> <p>Accounts Framework Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: An app may be able to fingerprint the user Description: This issue was addressed with improved data protection. CVE-2026-64733: Rosyna Keller of Totally Not Malicious Software (paradisefacade.com)</p> <p>App Store Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved checks. CVE-2026-43801: Rahul R…</p> <p><strong>Affected:</strong> APPLE-SA-07-27-2026-1 iOS</p> <p>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256</p> <p>APPLE-SA-07-27-2026-1 iOS 26.6 and iPadOS 26.6</p> <p>iOS 26.6 and iPadOS 26.6 addresses the following issues. Information about the security content is also available at https://support.apple.com/en-us/128066.</p> <p>Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories.</p> <p>Accessibility Available for: iPhone 11 and later Impact: An attacker with physical access may be able to access sensitive user data during iPhone Mirroring Description: This issue was addressed through improved state management. CVE-2026-64732: Jorge Welch (@jorgwelch)</p> <p>Accounts Framework Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: An app may be able to fingerprint the user Description: This issue was addressed with improved data protection. CVE-2026-64733: Rosyna Keller of Totally Not Malicious Software (paradisefacade.com)</p> <p>App Store Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved checks. CVE-2026-43801: Rahul R…</p> https://vulnerability.circl.lu/vuln/gcve-1988-2026-0281 https://vulnerability.circl.lu/vuln/ghsa-fv3r-47cp-xc8h <p>A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox.</p> <p>A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox.</p> https://vulnerability.circl.lu/vuln/ghsa-fv3r-47cp-xc8h https://vulnerability.circl.lu/vuln/ncsc-2026-0266 NCSC-2026-0266 https://vulnerability.circl.lu/vuln/ncsc-2026-0266 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2543 <p>Ein Angreifer kann mehrere Schwachstellen in Apple macOS Tahoe, Sonoma und Sequoia ausnutzen, um seine Privilegien zu erhöhen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Apple macOS Tahoe, Sonoma und Sequoia ausnutzen, um seine Privilegien zu erhöhen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2543