CVE Vulnerability Catalog

An authentication issue in iOS 27 and iPadOS 27 was addressed with improved state management. An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication.

A data protection issue was addressed with improved data protection mechanisms. The vulnerability affects iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, and watchOS 27. An app may be able to access sensitive user data.

An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, and visionOS 27. Processing a maliciously crafted file may lead to unexpected app termination.

The issue was addressed through improved state management. The issue affects macOS Golden Gate 27. An app may be able to access sensitive user data.

A buffer overflow was addressed with improved bounds checking. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination.

A use-after-free issue was addressed with improved memory management. The issue affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

A logic issue in macOS allows an application to bypass Gatekeeper checks. The flaw was addressed with improved checks and is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.6/26.7.

A correctness issue in macOS Sonoma allows an attacker with physical access to silently persist an Apple Account on an erased device. The issue is fixed in macOS Sonoma 14.8.8.

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker could leverage this to terminate their own process.

IBM Sterling B2B Integrator and IBM Sterling File Gateway in certain versions could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a time-of-check to time-of-use (TOCTOU) race condition.

IBM i Access Family versions 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges. This is caused by improper validation of user-supplied input in a session file.

IBM i Access Client Solutions (part of IBM i Access Family) versions 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges. This is caused by improper validation of user-supplied input in a malicious emulator macro RunProgram action.

IBM i Access Client Solutions (part of IBM i Access Family) versions 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges. This is caused by improper validation of user-supplied input in a STRPCCMD CL command.

IBM Verify Identity Access allows a remote attacker to conduct phishing attacks via an open redirect. By luring a victim to a crafted website, the attacker can spoof the displayed URL and redirect the user to a malicious site that appears trusted.

This entry covers IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001, IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001, and the corresponding container versions. The description does not include technical details of the vulnerability.

IBM Verify Identity Access is missing origin validation, allowing a remote attacker to perform operations as the victim and potentially launch further attacks against the systems.

IBM Langflow OSS versions 1.0.0 through 1.11.5 is vulnerable to server-side request forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

IBM Langflow OSS versions 1.0.0 through 1.11.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.