Product: Gerrit Summary Incorrect authorization in the submitted together feature in Gerrit allows an authenticated attacker with force push permissions on a secondary branch to bypass code review. This enables the attacker to forcefully submit code to restricted branches via a crafted submission matching the topic tag of an unapproved change. Details Severity Base Score…
Product: macOS Tahoe Summary An authorization issue was addressed with improved state management. This issue allows an app to potentially access sensitive user data. The vulnerability has been fixed in the latest version of macOS Tahoe. Details Severity Base Score CVE MEDIUM 5.5 CVE-2026-20696 Exploitation To exploit this vulnerability, an attacker would need to run…
Product: macOS Tahoe Summary A race condition was addressed with additional validation. This issue may allow an app to access sensitive user data. The vulnerability has been fixed in the latest version of macOS Tahoe. Details Severity Base Score CVE MEDIUM 4.7 CVE-2026-28830 Exploitation To exploit this vulnerability, an attacker would need to run a…
Product: macOS Summary A permissions issue was addressed with additional restrictions. This issue allows a malicious app to potentially break out of its sandbox. The vulnerability has been fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5. Details Severity Base Score CVE HIGH 8.8 CVE-2026-28978 Exploitation To exploit this vulnerability, an attacker…
Product: Prisma Access Agent Summary An improper certificate validation vulnerability in the Prisma Access Agent for Android and Chrome OS enables an attacker to perform a man-in-the-middle attack to intercept VPN traffic. By presenting a certificate for any domain issued by a trusted Certificate Authority, the attacker can capture sensitive device information. The Prisma Access…
Product: OpenThread Summary Improper Input Validation in the NAT64 translator in The OpenThread Authors OpenThread allows an attacker on the adjacent IPv4 network to inject corrupted IPv6 packets into the Thread mesh or bypass security checks via crafted IPv4 packets with options. This vulnerability affects all platforms prior to commit 26a882d. Details Severity Base Score…
Product: Prisma Access Agent Summary A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent enables a locally authenticated non-administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. This allows the user to execute arbitrary code and read sensitive information otherwise accessible…
Product: Prisma Access Agent Summary Multiple information disclosure vulnerabilities in Prisma Access Agent allow a local user to access sensitive configuration data and credentials. The vulnerabilities can lead to unauthorized access to sensitive information. The Prisma Access Agent on Linux, ChromeOS, Android, and iOS are not affected. Details Severity Base Score CVE MEDIUM 4.3 CVE-2026-0245…
Product: Prisma SD-WAN ION Summary An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables a man-in-the-middle attacker to impersonate the controller. This vulnerability can lead to unauthorized access and potential data breaches. It is crucial for users to be aware of this risk and take necessary precautions. Details Severity Base…
Product: Trust Protection Foundation Summary A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database. Successful exploitation could allow an attacker to read sensitive data, modify database contents, and escalate privileges to gain full administrative control of the platform. Details Severity Base Score CVE…