Aggregator

A vulnerability described as very critical has been identified in Apple macOS up to 15.8.1/26.7.1/27.1. Impacted is an unknown function. Such manipulation leads to race condition. This vulnerability is uniquely identified as CVE-2026-112492. Local access is required to approach this attack. No exploit exists. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Apple macOS 15.8.1/26.7.1/27.1. This issue affects some unknown processing. This manipulation causes improper privilege management. This vulnerability is handled as CVE-2026-112487. It is possible to launch the attack on the local host. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as very critical has been found in Apple macOS up to 15.8.1/26.7.1/27.1. This vulnerability affects unknown code. The manipulation results in algorithm downgrade. This vulnerability is known as CVE-2026-112493. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks. [...]

A vulnerability identified as very critical has been detected in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS. This affects an unknown part. The manipulation leads to race condition. This vulnerability is traded as CVE-2026-112477. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

它不是内存安全漏洞，也不是逻辑越权。它的本质是：地址解析层中存在三条相互独立的超线性（近二次）性能路径与一个参数上限触发的异常路径，而地址解析在 Node.js 的单线程事件循环上同步执行。

本文记录了针对已归档 Python 包 langchain-experimental 的代码审计过程。在该包的 PythonAstREPLTool 组件中，发现其对大模型（LLM）输出内容的过滤机制较弱，且直接使用 exec/eval 执行输入。结合平台判定与最新下载量数据，本文客观分析了该组件在现阶段（已停止维护）存在的安全风险及修复建议。

@tiptap/core >=3.7.0,<3.30.5 的 Markdown 属性解析里存在两条二次时间复杂度路径：Pandoc 风格的块属性解析器（attributeUtils.ts）在键值匹配和清理两个阶段各执行一次同型的未锚定贪婪搜索；行内 shortcode 解析器（createInlineMarkdownSpec.ts，以及 Mention 扩展自带的内联实现）对无等号的长词串从每个位

A vulnerability categorized as critical has been discovered in Apple iOS, iPadOS, macOS, tvOS and visionOS. Affected by this issue is some unknown functionality. Executing a manipulation can lead to out-of-bounds write. This vulnerability appears as CVE-2026-112468. The attack requires local access. There is no available exploit. It is advisable to upgrade the affected component.

OpenTelemetry-Go 的 OTLP 日志 gRPC 导出器（go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc，受影响区间 v0.5.0–v0.20.0，官方口径 < v0.21.0）会把 OTEL_EXPORTER_OTLP_LOGS_CERTIFICATE 这组环境变量完整解析进 cfg.tlsCfg——根 CA、

A vulnerability was found in Apple iPadOS, iOS, macOS, tvOS and visionOS. It has been rated as very critical. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in out-of-bounds write. This vulnerability is reported as CVE-2026-112469. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability was found in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS. It has been declared as very critical. Affected is an unknown function of the component Kernel. Such manipulation leads to out-of-bounds write. This vulnerability is documented as CVE-2026-112470. The attack needs to be performed locally. There is not any exploit available.

随机 tcache_key 拦截 double-free，safe-linking 隐藏链表指针，malloc/free hook 被连根移除。

A vulnerability was found in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS. It has been classified as problematic. This impacts an unknown function. This manipulation causes out-of-bounds read. This vulnerability is registered as CVE-2026-112466. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

CVE-2026-88975（CVSS 3.1 7.5，CWE-400）是 http4s Ember HTTP/2 实现的未认证资源消耗漏洞：读循环在缓冲完整 9 + length 字节之前不做任何帧大小校验，对端可以在 9 字节帧头里声明一个接近 24 位上限的单帧长度，并持续发送接近 16 MiB、但仍不足额的负载，使当前未完成帧的累积缓冲 acc 驻留约 16 MiB——约为 16 KiB

A vulnerability was found in Apple iOS, iPadOS, macOS and visionOS and classified as very critical. This affects an unknown function. The manipulation results in buffer overflow. This vulnerability is cataloged as CVE-2026-112488. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Apple iOS, iPadOS, macOS and visionOS up to 27.1 and classified as problematic. The impacted element is an unknown function of the component Hide My Email. The manipulation leads to information disclosure. This vulnerability is listed as CVE-2026-112500. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A vulnerability, which was classified as very critical, was found in Apple macOS up to 15.8.1/26.7.1/27.1. The affected element is an unknown function of the component Screen Sharing. Executing a manipulation can lead to out-of-bounds write. This vulnerability is tracked as CVE-2026-112505. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.

一个 xn-- 前缀加一个尾 -，黑名单里的域名就能原样通过校验；ToUnicode("xn--example-.com") 解码出 example.com 却不带错误。

过去做大模型安全时，我们习惯把注意力放在模型“看到了什么”：Prompt Injection、RAG 文档投毒、工具返回污染，本质上都在影响模型接收到的上下文。Structured Output、JSON Schema、GBNF、Guided Decoding 这类机制出现后，有一个问题又值得我们关注：模型下一步究竟被允许生成什么？