Where
AND
-Infinity
0
Severity
5.9
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

.NET Information Disclosure Vulnerability

1 / 4
Source: Microsoft
First published (updated )
Severity
5.9
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

.NET Security Feature Bypass Vulnerability

1 / 5
Source: Microsoft
First published (updated )
Severity
6.5
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Microsoft Excel Information Disclosure Vulnerability

1 / 2
Source: Microsoft
First published (updated )
Severity
6.5
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C

.NET Spoofing Vulnerability

1 / 4
Source: Microsoft
First published (updated )
Severity
6.1
EPSS
0.05%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code. This may surprise the user and potentially direct them to unwanted content.

1 / 2
Source: MITRE
First published (updated )
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address

1 / 2
Source: Mozilla
First published (updated )
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination

1 / 2
Source: Mozilla
First published (updated )
Severity
6.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Long pressing on a download link could potentially provide a means for cross-site scripting

1 / 2
Source: Mozilla
First published (updated )
Severity
6.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

The contextual menu for links could provide an opportunity for cross-site scripting attacks

1 / 2
Source: Mozilla
First published (updated )
Severity
4.3
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files.

1 / 2
First published (updated )
Severity
6.5
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header.

1 / 2
First published (updated )
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode.

1 / 2
First published (updated )
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintended file.

1 / 2
First published (updated )
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A rogue webpage could override the injected WKUserScript used by the logins autofill, this exploit could result in leaking a password for the current domain.

1 / 2
First published (updated )
Severity
6.1
EPSS
0.05%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS) attack.

1 / 2
Source: Mozilla
First published (updated )
Severity
6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information.

1 / 2
Source: Mozilla
First published (updated )
Severity
4.3
Input Validation, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Audio. A logic issue was addressed with improved checks.

1 / 14
Source: Apple
First published (updated )
Severity
4.3
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 77
Source: NVD
First published (updated )
Severity
4.3
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
Severity
4.3
Buffer Overflow, Race Condition, Input Validation, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 64
Source: Apple
First published (updated )
Severity
4.3
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 74
Source: Apple
First published (updated )
Severity
6.5
Input Validation, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination.

1 / 18
Source: NVD
First published (updated )
Severity
4.3
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
Severity
6.5
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 77
Source: NVD
First published (updated )
Severity
5.5
Buffer Overflow, Race Condition, Input Validation, Integer Overflow, Infoleak
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 31
Source: Apple
First published (updated )
Severity
4.3
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 70
Source: Apple
First published (updated )
Severity
6.5
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 83
Source: Apple
First published (updated )
Severity
5.9
Input Validation, Integer Overflow, Use After Free
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic.

1 / 9
Source: MITRE
First published (updated )
Severity
6.5
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. An attacker in a privileged network position may be able to cause a denial-of-service.

1 / 3
Source: MITRE
First published (updated )
Severity
6.5
Input Validation, Integer Overflow, Use After Free, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Audio. A logic issue was addressed with improved checks.

1 / 8
Source: Apple
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203