CVE Vulnerability Catalog

A permissions issue was fixed with additional restrictions in macOS. Affected versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

A permissions issue was fixed with additional restrictions in macOS. Affected versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Processing a maliciously crafted image may lead to arbitrary code execution. A buffer overflow was addressed with improved bounds checking.

An integer overflow vulnerability in Apple systems. A malicious app may be able to break out of its sandbox.

An app may be able to bypass network restrictions. A permissions issue was addressed with additional sandbox restrictions.

A buffer overflow vulnerability in Apple systems. Connecting to a malicious NFS server may lead to kernel memory corruption.

A race condition was addressed with improved state handling. This issue affects macOS (Sequoia, Sonoma, Tahoe) and may allow an app to elevate privileges.

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Tahoe 26.6. A user may be able to elevate privileges.

A memory handling issue was addressed. This issue affects Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) and may allow an attacker to cause unexpected system termination or read kernel memory.

An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account conditions.

JFrog Artifactory contains an authentication handling weakness in internal request processing that may allow privilege escalation under specific conditions.

An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas.

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location.

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions.

Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link in the pack's functions directory.

Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via a crafted database connection identifier or pack configuration value.

An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions.

A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICNS image processing, the plugin reads from the mask data buffer without verifying if the cursor exceeds the allocated resource size. This out-of-bounds read vulnerability results in information disclosure of heap contents or a crash leading to a denial of service.