CVE Security

critical 10

16/10/2026

🔥 EXPLOITÉ - Fortinet Multiple Products Path Traversal Vulnerability

Vulnérabilité activement exploitée dans la nature - Action immédiate requise

iOS Mobile Réseau

CVE-2025-61624

Lire l'article

medium 6.3

16/10/2026

Vulnérabilité medium détectée - CVE-2026-108119

A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not va...

iOS

CVE-2026-108119

Lire l'article

unknown

16/10/2026

Vulnérabilité unknown détectée - CVE-2026-104117

A missing authorization check in the illumos IP management daemon (ipmgmtd) allows a local user to change the persistent IP multipathing (IPMP) config...

iOS Mobile Windows

CVE-2026-104117

Lire l'article

unknown

16/10/2026

Vulnérabilité unknown détectée - CVE-2026-104113

A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request tha...

iOS Mobile Windows

CVE-2026-104113

Lire l'article

medium 4.9

16/10/2026

Vulnérabilité medium détectée - CVE-2026-96396

The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when generating Q...

iOS

CVE-2026-96396

Lire l'article

low 2.9

16/10/2026

Vulnérabilité low détectée - CVE-2026-96394

The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data w...

Android iOS

CVE-2026-96394

Lire l'article

low 3.6

16/10/2026

Vulnérabilité low détectée - CVE-2026-96395

The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails ...

iOS

CVE-2026-96395

Lire l'article

medium 5.1

15/10/2026

Vulnérabilité medium détectée - CVE-2026-107888

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary pri...

iOS Mobile

CVE-2026-107888

Lire l'article

high 7.8

15/10/2026

Vulnérabilité high détectée - CVE-2026-11318

Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged at...

iOS

CVE-2026-11318

Lire l'article

high 7.1

15/10/2026

Vulnérabilité high détectée - CVE-2026-107337

The Malcolm kiosk Flask application exposes a POST /script_call/<script> endpoint with zero authentication and wildcard CORS (CORS(app)). An attacker ...

iOS Mobile Web

CVE-2026-107337

Lire l'article

medium 5.5

14/10/2026

Vulnérabilité medium détectée - CVE-2026-88514

An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information.

iOS

CVE-2026-88514

Lire l'article

high 8.8

14/10/2026

Vulnérabilité high détectée - CVE-2026-106059

GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository file...

iOS

CVE-2026-106059

Lire l'article