CVE Vulnerability Catalog

A privacy issue was addressed with improved access restrictions. The issue affects iOS, iPadOS, macOS, tvOS, visionOS and watchOS. An app may be able to access sensitive user data.

The issue was addressed with improved validation of the caller's access. The issue affects iOS, iPadOS, macOS and visionOS. An app may be able to access protected user data.

Letta through 0.16.8 contains an information disclosure vulnerability because LocalSandbox subprocesses inherit the full server environment. Users running tools can read server secrets such as LETTA_PG_URI, POSTGRES_PASSWORD, and provider API keys, then access cross-tenant database data.

A buffer overflow in macOS was addressed with improved size validation. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

The issue was addressed with improved handling of secure input state. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. An app may be able to access sensitive user data.

A race condition in macOS was addressed with additional validation. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences.

An access issue in macOS was addressed with improved access controls. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. An app may be able to access sensitive user data.

An authorization issue was addressed with improved state management. Fixed in macOS Sequoia 15.8 and visionOS 27. An app may be able to access sensitive user data.

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. An authenticated user with code execution in their own sandbox can connect directly to other tenants' containers, bypassing require_workspace_owner checks.

Before version 0.9.0, Pingora accepted HTTP/2 requests where the Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs saw the :authority value, but the upstream received the client-supplied Host value. Pingora also accepted :authority values containing userinfo (e.g., [email protected]), violating RFC 9113 Section 8.3.1.

A Server-Side Request Forgery (SSRF) vulnerability in IBM ContextForge MCP Gateway versions 0.1.0 through 1.0.5. An authenticated user with gateway creation privileges can perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints by supplying a malicious oauth_config.token_url parameter during OAuth-enabled gateway registration.

A security vulnerability was detected in H3C Magic NX15 NX15V100R017 affecting the sub_416874 function in /usr/bin/usrlist. Manipulation leads to a stack-based buffer overflow, and the attack can be launched remotely. The exploit has been publicly disclosed and may be used.

A vulnerability in the Bluetooth Classic Hands-Free Profile HF role (hfp_hf.c) causes AT command buffers still queued on hf->tx_pending to be leaked when the RFCOMM DLC goes down, permanently draining the fixed hf_pool. Additionally, hfp_hf_disconnected() leaves BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() may memset() the object while work items are still pending or running, corrupting shared kernel workqueue state. A remote Audio Gateway peer can exhaust the buffer pool and stall the Bluetooth RX thread.

A vulnerability in the Zephyr RTOS syscall verifier: z_vrfy_rtio_cqe_get_mempool_buffer() validated its output parameters buff and buff_len with K_SYSCALL_MEMORY_READ() instead of K_SYSCALL_MEMORY_WRITE(). This allows an unprivileged user-mode thread to invoke the syscall with pointers to read-only memory, causing a supervisor-mode store outside the permitted region or a kernel fault that halts or reboots the device.

IBM Storage TS4500 Library versions 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list was incomplete and omitted 0.0.0.0/8, 100.64.0.0/10, ::/128, fc00::/7, and fe80::/10, as well as IPv4-mapped IPv6 forms, allowing an authenticated user to direct requests to internal addresses from the MISP server's network context.

A weakness has been identified in H3C Magic NX15 V100R017 affecting the importprofile function in the /api/upload file. Manipulation of the fileName argument causes path traversal, the attack can be initiated remotely, and the exploit has been made publicly available.

IBM Storage TS4500 Library and IBM TS4500 Tape Library/Diamondback Tape Library versions 1.1.1.6 through 1.12.0.3 do not invalidate sessions, which could allow an authenticated user to impersonate another user on the system.

IBM Storage TS4500 Library versions 1.1.1.6 through 1.12.0.3 does not invalidate the session after logout, which could allow an authenticated user to impersonate another user on the system.

IBM Storage TS4500 Library and IBM Diamondback Tape Library versions 1.1.1.6 through 1.12.0.3 could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that consume excessive amounts of system resources.