https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 16:06:46 +0000 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0355 certfr-2026-avi-0355 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0355 https://vulnerability.circl.lu/vuln/fkie_cve-2026-28874 <p>The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may cause an unexpected app termination.</p> <p>The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may cause an unexpected app termination.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-28874 https://vulnerability.circl.lu/vuln/gcve-1988-2026-0261 <p><strong>Affected:</strong> APPLE-SA-03-24-2026-1 iOS</p> <p>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256</p> <p>APPLE-SA-03-24-2026-1 iOS 26.4 and iPadOS 26.4</p> <p>iOS 26.4 and iPadOS 26.4 addresses the following issues. Information about the security content is also available at https://support.apple.com/126792.</p> <p>Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories.</p> <p>802.1X Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: An attacker in a privileged network position may be able to intercept network traffic Description: An authentication issue was addressed with improved state management. CVE-2026-28865: Héloïse Gollier and Mathy Vanhoef (KU Leuven)</p> <p>Accounts Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-28877: Rosyna Keller of Totally Not Malicious Software</p> <p>App Protection Available for: iPhone 11 and later Impact: An attacker with physical access to an iOS device with Stolen Device Protection enabled may be able to access biometrics-gated Protect…</p> <p><strong>Affected:</strong> APPLE-SA-03-24-2026-1 iOS</p> <p>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256</p> <p>APPLE-SA-03-24-2026-1 iOS 26.4 and iPadOS 26.4</p> <p>iOS 26.4 and iPadOS 26.4 addresses the following issues. Information about the security content is also available at https://support.apple.com/126792.</p> <p>Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories.</p> <p>802.1X Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: An attacker in a privileged network position may be able to intercept network traffic Description: An authentication issue was addressed with improved state management. CVE-2026-28865: Héloïse Gollier and Mathy Vanhoef (KU Leuven)</p> <p>Accounts Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-28877: Rosyna Keller of Totally Not Malicious Software</p> <p>App Protection Available for: iPhone 11 and later Impact: An attacker with physical access to an iOS device with Stolen Device Protection enabled may be able to access biometrics-gated Protect…</p> https://vulnerability.circl.lu/vuln/gcve-1988-2026-0261 https://vulnerability.circl.lu/vuln/ghsa-g93j-w95x-p4ww <p>The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may cause an unexpected app termination.</p> <p>The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may cause an unexpected app termination.</p> https://vulnerability.circl.lu/vuln/ghsa-g93j-w95x-p4ww https://vulnerability.circl.lu/vuln/ncsc-2026-0101 NCSC-2026-0101 https://vulnerability.circl.lu/vuln/ncsc-2026-0101 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-0852 <p>Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.</p> https://vulnerability.circl.lu/vuln/wid-sec-w-2026-0852