CVE Vulnerability Catalog

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

A parsing issue in the handling of directory paths in macOS was addressed with improved path validation. An app may be able to access sensitive user data.

An out-of-bounds write issue in macOS was addressed with improved input validation. Parsing a file may lead to an unexpected app termination.

This issue was addressed with improved validation of symlinks. The vulnerability is fixed in iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, and watchOS 26.1. An app may be able to access protected user data.

A permissions issue in macOS was addressed with additional restrictions. An app may be able to access sensitive user data.

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to cause a denial-of-service.

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1. An app may bypass Gatekeeper checks.

Apple addressed a correctness issue with improved checks in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. The flaw allows an app to access sensitive user data.

A permissions issue in macOS was addressed with additional restrictions. An app with root privileges may be able to access private information.

The issue was addressed by adding additional logic. The vulnerability is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1. An app may be able to access user-sensitive data.

This issue was addressed with additional entitlement checks. The vulnerability is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1. An app may be able to access user-sensitive data.

A logic issue was addressed with improved checks. The vulnerability is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1. An app may be able to access user-sensitive data.

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7 and macOS Tahoe 26. An app may be able to bypass Privacy preferences.

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.27.1 and below allow attackers to permanently corrupt issue activity logs by submitting extremely long notes (tested with 4,788,761 characters) due to a lack of server-side validation of note length. Once such a note is added, the activity stream UI fails to render; therefore, new notes cannot be displayed, effectively breaking all future collaboration on the issue. This issue is fixed in version 2.27.2.

By failing to authenticate three times to an unconfigured Abilis CPX device via SSH, an attacker can log in to a restricted shell on the fourth attempt and from there relay connections.

IBM Cloud Pak for Business Automation and IBM Business Automation Workflow are vulnerable to stored cross-site scripting. An authenticated user can embed arbitrary JavaScript code in the Web UI, altering intended functionality and potentially leading to credential disclosure within a trusted session.

Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose sensitive user account information (including API keys and hashed passwords) to authenticated users who should not have access to that data. Exposure of API keys or password hashes could lead to account compromise, abuse of API privileges, or offline cracking attempts. CVE-2024-13995 addresses a similar vulnerability.

FairSketch Rise Ultimate Project Manager & CRM version 3.9.4 is vulnerable to Insecure Permissions. A remote authenticated user can append comments or upload attachments to tickets for which they lack view or edit authorization, due to missing authorization checks in the ticketing/commenting API.

The KMIP response parser built into MongoDB binaries is overly tolerant of certain malformed packets and may parse them into invalid objects. Later reads of this object can result in read access violations.

Grav CMS version 1.7.49.5 is vulnerable to Cross Site Scripting (XSS). The vulnerability allows injection of malicious script that may execute in the user's browser.