CVE Vulnerability Catalog

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

A double free issue in WebKit (iOS, iPadOS, macOS Sequoia, macOS Sonoma, macOS Tahoe, tvOS, visionOS, watchOS) may lead to an unexpected process crash when processing maliciously crafted web content.

A use-after-free issue in WebKit (Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) may allow a malicious web extension to cause an unexpected process crash.

A memory handling issue in WebKit (iOS, iPadOS, macOS Sequoia, macOS Sonoma, macOS Tahoe, tvOS, visionOS, watchOS) may lead to an unexpected process crash when processing maliciously crafted web content.

A cross-origin vulnerability in WebKit, fixed with improved tracking of security origins. Processing maliciously crafted web content may disclose sensitive user information.

A use-after-free vulnerability in WebKit, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.

An out-of-bounds access vulnerability in Safari, fixed with improved bounds checking. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A vulnerability in WebKit, fixed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash.

A vulnerability in WebKit, fixed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash.

A Cross-Site Request Forgery (CSRF) vulnerability has been found in Squidex CMS version 7.21.0 and earlier. An attacker can exploit the IdentityServer account profile endpoint to escalate privileges without the victim's knowledge.

An out-of-bounds access vulnerability in WebKit, fixed with improved bounds checking. Processing maliciously crafted web content may lead to an unexpected process crash.

A memory leak vulnerability in CSS::Minifier::XS for Perl before version 0.14 occurs when minifying a document containing only characters to be removed, such as comments and whitespace.

A vulnerability in the mdex and mdex_native libraries allows an unauthenticated attacker to cause a denial of service via unbounded memory allocation. The parse_highlight_lines function in the LumisAdapter component expands a user-controlled line range from a fenced code block without an upper bound, allocating huge vectors. A payload with a range like 1-2000000000 can exhaust host memory and abort the BEAM process.

A flaw was found in p11-kit where the RPC message attribute parsing functions lack recursion depth limits when processing nested template attributes. An unauthenticated attacker with local access to the Unix domain socket can send a crafted request causing stack exhaustion and crashing the p11-kit server and its dependent services.

A vulnerability in Hi.Events up to version 1.9.0 allows unauthorized access to attendee lists via public check-in list endpoints. Using only the short_id, an attacker can retrieve full attendee data including emails and personal information, as well as create or delete check-in records without authentication.

A vulnerability in Hi.Events through version 1.9.0 allows unlimited use of limited promo codes. The validation checks the usage count before the asynchronous UpdateEventStatisticsJob increments it, enabling attackers to sequentially reserve multiple orders with the same code, each seeing usage_count=0, and then complete them all at a discounted price.

Mixpost through version 2.6.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in authenticated users' browsers by crafting malicious OAuth callback URLs with unsanitized error query parameters.

A vulnerability in Papermark through version 0.22.0 is caused by a CORS misconfiguration, allowing unauthenticated remote attackers to perform credentialed cross-origin requests. Attackers can exploit the TUS-based viewer upload endpoint that reflects arbitrary request Origins with Access-Control-Allow-Credentials set to true.

A vulnerability in SigNoz before version 0.133.0 allows authenticated users to access alert rules of other organizations by supplying a target rule UUID. The alert rule store lacks filtering by organization ID, bypassing multi-tenant access controls.

Vulnerability in Elide through version 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in SortingImpl.getValidSortingRules, allowing attackers to sort collections by forbidden fields. Attackers can infer hidden field values through row ordering analysis, leaking relative field ordering across all rows via both JSON:API and GraphQL read paths.