CVE Vulnerability Catalog

UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS) condition.

In Apache Airflow Amazon provider, the AWS auth manager's SAML login flow does not bind the authentication response to the browser that began it. The login handler discards the AuthnRequest ID and the callback validates the assertion without requiring a matching InResponseTo, allowing an unauthenticated attacker to silently log a victim into the attacker's Airflow account.

An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0. An authenticated attacker can escalate privileges by modifying the login_privilege data on the affected device.

Missing authentication for a critical function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests. The router returns device identification information and switches into a specific mode, which may prevent self-recovery under abnormal conditions.

Certain ASUS router models contain a buffer copy without checking input size. An adjacent authenticated user can corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length.

Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy did not remove the Connection header, other hop-by-hop headers, or headers nominated by Connection, despite RFC 9110 requirements. A client could nominate a header added by the application in upstream_request_filter (e.g., X-Forwarded-For), which would then be stripped by an HTTP/1 intermediary before reaching the origin.

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges by replacing a DLL that is later loaded by a high-privilege process.

An out-of-bounds write issue was addressed with improved bounds checking. The issue is fixed in macOS Sequoia 15.8 and macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

A privacy issue was addressed with improved checks. The issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.

An authorization issue was addressed with improved network restrictions. The issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.

An authorization issue was addressed with improved state management. The flaw affects iOS 27, iPadOS 27 and macOS Golden Gate 27. An app may be able to access sensitive user data.

An out-of-bounds read was addressed with improved bounds checking. The flaw affects iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.

A denial-of-service issue was addressed with improved input validation. The flaw affects iOS 26.7, iPadOS 26.7, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to cause a denial-of-service.

A double free issue was addressed with improved memory management. The flaw affects iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27 and watchOS 27. An app may be able to cause unexpected system termination.

A race condition was addressed with additional validation. The flaw affects iOS 27, iPadOS 27 and macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.

An input validation issue was addressed with improved input validation. The flaw affects iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. Processing a maliciously crafted image may lead to unexpected process termination.

An out-of-bounds read was addressed with improved bounds checking. The flaw affects iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27 and watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.

An authorization issue was addressed with improved state management. The flaw affects iOS 27 and iPadOS 27. An app may be able to access sensitive user data.

An out-of-bounds write issue was addressed with improved bounds checking. The flaw affects iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.

This issue was addressed by enforcing library validation on the affected binaries. The flaw affects Xcode 27. A malicious app may be able to break out of its sandbox.