CVE-2026-112898 - Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
CVE ID :CVE-2026-112898
Published : Oct. 19, 2026, 10:17 p.m. | 1 hour, 20 minutes ago
Description :Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty palette. ImagingPaletteCacheUpdate() leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as output pixel indices. An attacker who controls the palette image can obtain stack contents from a returned PNG or GIF. This can disclose addresses and stack-canary data without an out-of-bounds access, memory corruption, or process crash. This issue is fixed in version 13.0.0.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-112898
Published : Oct. 19, 2026, 10:17 p.m. | 1 hour, 20 minutes ago
Description :Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty palette. ImagingPaletteCacheUpdate() leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as output pixel indices. An attacker who controls the palette image can obtain stack contents from a returned PNG or GIF. This can disclose addresses and stack-canary data without an out-of-bounds access, memory corruption, or process crash. This issue is fixed in version 13.0.0.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86932 - macOS Authorization Bypass Vulnerability
CVE ID :CVE-2026-86932
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86932
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86933 - macOS Contacts Sandbox Bypass Vulnerability
CVE ID :CVE-2026-86933
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86933
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86935 - macOS Sandbox Information Disclosure
CVE ID :CVE-2026-86935
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86935
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86940 - Apple macOS Kernel Memory Disclosure
CVE ID :CVE-2026-86940
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86940
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86944 - Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
CVE ID :CVE-2026-86944
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86944
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86948 - Apple Xcode Sandbox Escape Vulnerability
CVE ID :CVE-2026-86948
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86948
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86949 - Apple Xcode Sandbox Escape Vulnerability
CVE ID :CVE-2026-86949
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86949
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86953 - Apple Out-of-Bounds Write Vulnerability
CVE ID :CVE-2026-86953
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86953
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86955 - Apple iOS and iPadOS Authorization Bypass Vulnerability
CVE ID :CVE-2026-86955
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86955
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86957 - Apple Operating Systems Out-of-Bounds Read Vulnerability
CVE ID :CVE-2026-86957
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86957
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86959 - Apple Image Processing Input Validation Vulnerability
CVE ID :CVE-2026-86959
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to unexpected process termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86959
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to unexpected process termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86961 - Apple iOS, iPadOS, and macOS Sandbox Escape via Race Condition
CVE ID :CVE-2026-86961
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86961
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86962 - Apple OS Double Free Vulnerability
CVE ID :CVE-2026-86962
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86962
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86963 - Apple iOS and iPadOS Denial-of-Service Vulnerability
CVE ID :CVE-2026-86963
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to cause a denial-of-service.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86963
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to cause a denial-of-service.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86975 - Apple Image Processing Out-of-Bounds Read
CVE ID :CVE-2026-86975
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86975
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86976 - Apple iOS and macOS Authorization Bypass Vulnerability
CVE ID :CVE-2026-86976
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. An app may be able to access sensitive user data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86976
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. An app may be able to access sensitive user data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86977 - Apple iOS and iPadOS Unauthorized Telephony Access Vulnerability
CVE ID :CVE-2026-86977
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86977
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86979 - macOS Privacy Information Disclosure Vulnerability
CVE ID :CVE-2026-86979
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86979
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86981 - Apple macOS Out-of-Bounds Write Vulnerability
CVE ID :CVE-2026-86981
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-86981
Published : Oct. 20, 2026, 1:17 a.m. | 2 hours, 21 minutes ago
Description :An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-102438 - ASUS Armoury Crate DLL Hijacking Vulnerability
CVE ID :CVE-2026-102438
Published : Oct. 20, 2026, 2:17 a.m. | 1 hour, 21 minutes ago
Description :An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Severity: 8.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-102438
Published : Oct. 20, 2026, 2:17 a.m. | 1 hour, 21 minutes ago
Description :An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Severity: 8.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...