Where
-Infinity
0

Trending

Last week
Last month
Last year

Prisma Access AgentPrisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows (Severity: MEDIUM)

Risk 57
Severity
8.4
AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data.

This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not affected.

1 / 2
Source: Palo Alto Networks
First published (updated )
CVE-2026-0306

Prisma Access AgentPrisma Access Agent: Information Disclosure Vulnerability on Linux (Severity: MEDIUM)

Risk 37
Severity
6.8
Infoleak
AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/V:D/RE:M/U:Amber

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials.

The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-0305

Palo Alto Networks GlobalProtect AppGlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)

Risk 73
Severity
8.5
AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:U/AU:N/R:U/V:D/RE:M/U:Amber

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.

This GlobalProtect app on iOS, Android and ChromeOS is not impacted.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-0307

Mozilla Firefox1 vulnerability

Risk 5
Severity
1

Security Vulnerabilities fixed in Firefox for iOS 155.1

First published (updated )
Advisory
MFSA2026-89

Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS

Risk 22
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed.

1 / 2
Source: Mozilla
First published (updated )
CVE-2026-86853

Mozilla Firefox1 vulnerability

Risk 19
Severity
4

Security Vulnerabilities fixed in Firefox for iOS 155.0

First published (updated )
Advisory
MFSA2026-81

Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS

Risk 34
Severity
5.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content.

1 / 2
Source: Mozilla
First published (updated )
CVE-2026-81267

Apple SafariUse After Free

Risk 33
Severity
7
Use After Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination.

First published (updated )
REDHAT-BUG-2520320

Apple iOS1 vulnerability

Risk 37
First published (updated )
Advisory
APPLE-126793

APPLE-126793-Safari

First published (updated )
Advisory
APPLE-126793-Safari

Apple iOSBuffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 22
Severity
4.3
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 77
Source: NVD
First published (updated )
CVE-2026-65334

Apple iOSInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 74
Source: Apple
First published (updated )
CVE-2026-64784

Apple iOSInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65331

Apple iOSBuffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 22
Severity
4.3
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65335

Apple iOSInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65332

Apple iOSBuffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 22
Severity
4.3
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65333

Apple iOSInput Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65337

Apple iOSInput Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65336

Apple iOSInput Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65340

Apple iOSInput Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-64781

Apple iOSRace Condition, Use After Free, Input Validation, Integer Overflow, Buffer Overflow

Risk 17
Severity
3.1
Race Condition, Use After Free, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 77
Source: NVD
First published (updated )
CVE-2026-64782

Apple iOSBuffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 34
Severity
5.4
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65341

Apple iOSUse After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition

Risk 37
Severity
6.5
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 77
Source: NVD
First published (updated )
CVE-2026-64715

Apple iOSBuffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 22
Severity
4.3
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-64780

Apple iOSBuffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 77
Severity
8.8
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.

1 / 78
Source: NVD
First published (updated )
CVE-2026-43794

Apple iOSInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Infoleak

Risk 37
Severity
6.5
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 83
Source: Apple
First published (updated )
CVE-2026-64778

Apple iOSRace Condition, Use After Free, Input Validation, Integer Overflow, Buffer Overflow

Risk 17
Severity
3.1
Race Condition, Use After Free, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 85
Source: NVD
First published (updated )
CVE-2026-64779

Apple iOSUse After Free, Input Validation, Integer Overflow

Risk 40
Severity
6.5
Use After Free, Input Validation, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination.

1 / 18
Source: NVD
First published (updated )
CVE-2026-64787

Apple iOSBuffer Overflow, Race Condition, Input Validation, Integer Overflow, Infoleak

Risk 32
Severity
5.5
Buffer Overflow, Race Condition, Input Validation, Integer Overflow, Infoleak
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 31
Source: Apple
First published (updated )
CVE-2026-64760

Apple iOSBuffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 22
Severity
4.3
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 70
Source: Apple
First published (updated )
CVE-2026-43795

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203