CVE Vulnerability Catalog

React Router versions 6.4.0 through 7.17.0 allow unexpected constructor execution on the client if application code allows attacker-supplied input to overwrite certain aspects of SSR errors. This can trigger an outbound network request. Only affects Framework Mode and Data Mode applications performing manual SSR/hydration. Fixed in version 7.18.0.

An issue in the redirect parameter in Milk admin version 0.9.8 and earlier allows remote attackers to redirect users to arbitrary external URLs via a crafted request.

Pivotick contains an XSS vulnerability in the sidebar property-list component. Link-like property values (url, uri, href, link, website, homepage) were rendered as hyperlinks without URL scheme validation. An attacker can supply a malicious value using the javascript: scheme, including whitespace or control characters. Clicking the link can execute JavaScript in the application context. The vulnerability was fixed by normalizing values and blocking unsafe schemes.

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory.

An authorization issue was addressed with improved state management. This issue affects iOS and iPadOS and may allow an app to access sensitive user data.

An out-of-bounds write vulnerability in Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) fixed with improved bounds checking. Processing a maliciously crafted file may lead to a denial-of-service.

An information leakage vulnerability in Apple systems, fixed with additional validation. An app may be able to disclose kernel memory.

An authorization issue, fixed with improved state management. An app may be able to access sensitive user data.

A vulnerability in Apple systems, fixed by using HTTPS when sending information over the network. An app may be able to access sensitive user data.

A permissions issue in Apple systems. Additional restrictions were added. An app may be able to read a persistent device identifier.

An inconsistent user interface issue, fixed with improved state management. A remote attacker may be able to bypass network filters.

A vulnerability in Apple systems, fixed with improved checks. Processing a maliciously crafted contact may leak sensitive data.

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7. An attacker with physical access may be able to access sensitive user data during iPhone Mirroring.

UI was improved. The issue affects Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Visiting a website that frames malicious content may lead to UI spoofing.

Permissions validation was improved. The issue affects Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy.

A vulnerability in Apple systems, fixed with improved memory handling. An attacker on the local network may be able to cause a denial-of-service.

A logic issue was addressed with improved checks. This issue affects iOS, iPadOS, and macOS and may allow an app to access sensitive user data.

A buffer overflow vulnerability in Apple systems, fixed with improved memory handling. Processing a 3D model may lead to disclosure of process memory.

A vulnerability in Apple systems, fixed through improved state management. An app may be able to access sensitive user data.

A use-after-free issue in the web content processing component was addressed with improved memory management. The flaw affects Safari, iOS, iPadOS, macOS Golden Gate, macOS Tahoe, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to an unexpected Safari crash.