GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

GCVE-1988-2026-0219

Vulnerability from gna-1988 – Published: 2026-09-08 07:57 – Updated: 2026-09-09 10:07
VLAI
Title
APPLE-SA-02-11-2026-4 macOS Sequoia 15.7.4
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-02-11-2026-4 macOS Sequoia 15.7.4 macOS Sequoia 15.7.4 addresses the following issues. Information about the security content is also available at https://support.apple.com/126349. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AppleMobileFileIntegrity Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: An injection issue was addressed with improved validation. CVE-2026-20624: Mickey Jin (@patch1t) AppleMobileFileIntegrity Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-20625: Mickey Jin (@patch1t), Ryan Dowd (@_rdowd) Compression Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2025-43403: Mickey Jin (@patch1t) CoreAudio Available for: macOS Sequoia Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory Description: An out-of-bounds access issue was addressed with improved bounds checking. CVE-2026-20611: Anonymous working with Trend Micro Zero Day Initiative CoreMedia Available for: macOS Sequoia Impact: Processing a maliciously crafted file may lead to a denial-of- service or potentially disclose memory contents Description: The issue was addressed with improved memory handling. CVE-2026-20609: Yiğit Can YILMAZ (@yilmazcanyigit) GPU Drivers Available for: macOS Sequoia Impact: An attacker may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read issue was addressed with improved input validation. CVE-2026-20620: Murray Mike ImageIO Available for: macOS Sequoia Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved memory handling. CVE-2026-20634: George Karchemsky (@gkarchemsky) working with Trend Micro Zero Day Initiative ImageIO Available for: macOS Sequoia Impact: Processing a maliciously crafted image may lead to disclosure of user information Description: The issue was addressed with improved bounds checks. CVE-2026-20675: George Karchemsky (@gkarchemsky) working with Trend Micro Zero Day Initiative Kernel Available for: macOS Sequoia Impact: An attacker in a privileged network position may be able to intercept network traffic Description: A logic issue was addressed with improved checks. CVE-2026-20671: Xin'an Zhou, Juefei Pu, Zhutian Liu, Zhiyun Qian, Zhaowei Tan, Srikanth V. Krishnamurthy, Mathy Vanhoef Kernel Available for: macOS Sequoia Impact: A malicious app may be able to gain root privileges Description: This issue was addressed with improved checks. CVE-2026-20626: Keisuke Hosoda libexpat Available for: macOS Sequoia Impact: Processing a maliciously crafted file may lead to a denial-of- service Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-59375 libnetcore Available for: macOS Sequoia Impact: An attacker in a privileged network position may be able to intercept network traffic Description: A logic issue was addressed with improved checks. CVE-2026-20671: Xin'an Zhou, Juefei Pu, Zhutian Liu, Zhiyun Qian, Zhaowei Tan, Srikanth V. Krishnamurthy, Mathy Vanhoef libxpc Available for: macOS Sequoia Impact: An app may be able to break out of its sandbox Description: A logic issue was addressed with improved checks. CVE-2026-20667: an anonymous researcher Mail Available for: macOS Sequoia Impact: Turning off "Load remote content in messages” may not apply to all mail previews Description: A logic issue was addressed with improved checks. CVE-2026-20673: an anonymous researcher Multi-Touch Available for: macOS Sequoia Impact: A malicious HID device may cause an unexpected process crash Description: The issue was addressed with improved bounds checks. CVE-2025-43533: Google Threat Analysis Group CVE-2025-46300: Google Threat Analysis Group CVE-2025-46301: Google Threat Analysis Group CVE-2025-46302: Google Threat Analysis Group CVE-2025-46303: Google Threat Analysis Group CVE-2025-46304: Google Threat Analysis Group CVE-2025-46305: Google Threat Analysis Group PackageKit Available for: macOS Sequoia Impact: An attacker with root privileges may be able to delete protected system files Description: This issue was addressed through improved state management. CVE-2025-46310: Mickey Jin (@patch1t) Remote Management Available for: macOS Sequoia Impact: An app may be able to gain root privileges Description: A path handling issue was addressed with improved validation. CVE-2026-20614: Gergely Kalman (@gergely_kalman) Sandbox Available for: macOS Sequoia Impact: An app may be able to break out of its sandbox Description: A permissions issue was addressed with additional restrictions. CVE-2026-20628: Noah Gregory (wts.dev) Security Available for: macOS Sequoia Impact: A remote attacker may be able to cause a denial-of-service Description: A logic issue was addressed with improved checks. CVE-2025-46290: Bing Shi, Wenchao Li and Xiaolong Bai of Alibaba Group, and Luyi Xing of Indiana University Bloomington Shortcuts Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-20653: Enis Maholli (enismaholli.com) Siri Available for: macOS Sequoia Impact: An attacker with physical access to a locked device may be able to view sensitive user information Description: An authorization issue was addressed with improved state management. CVE-2026-20662: Vivek Dhar, ASI (RM) in Border Security Force, FTR HQ BSF Kashmir Spotlight Available for: macOS Sequoia Impact: A sandboxed app may be able to access sensitive user data Description: The issue was addressed with additional restrictions on the observability of app states. CVE-2026-20680: an anonymous researcher Spotlight Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved checks. CVE-2026-20612: Mickey Jin (@patch1t) StoreKit Available for: macOS Sequoia Impact: An app may be able to identify what other apps a user has installed Description: A privacy issue was addressed with improved checks. CVE-2026-20641: Gongyu Ma (@Mezone0) System Settings Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: A logging issue was addressed with improved data redaction. CVE-2026-20619: Asaf Cohen UIKit Available for: macOS Sequoia Impact: An app may be able to bypass certain Privacy preferences Description: This issue was addressed by removing the vulnerable code. CVE-2026-20606: LeminLimez Voice Control Available for: macOS Sequoia Impact: An app may be able to crash a system process Description: The issue was addressed with improved memory handling. CVE-2026-20605: @cloudlldb of @pixiepointsec Wi-Fi Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling. CVE-2026-20621: Wang Yu of Cyberserval WindowServer Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: The issue was addressed with improved memory handling. CVE-2025-43402: @cloudlldb of @pixiepointsec WindowServer Available for: macOS Sequoia Impact: An app may be able to cause a denial-of-service Description: The issue was addressed with improved handling of caches. CVE-2026-20602: @cloudlldb of @pixiepointsec Additional recognition CoreServices We would like to acknowledge YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab for their assistance. Kernel We would like to acknowledge Xinru Chi of Pangu Lab for their assistance. libpthread We would like to acknowledge Fabiano Anemone for their assistance. WindowServer We would like to acknowledge @cloudlldb of @pixiepointsec for their assistance. macOS Sequoia 15.7.4 may be obtained from the Mac App Store or Apple's Software Downloads web site: https://support.apple.com/downloads/ All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmmNDtIACgkQ4Ifiq8DH 7PX86w/+MCEzJF6c4ePythtPWP58l7SoHTI14i8pRdYsReBDkEU/pyYJ06JPN3vB Mlc9s75/l8zUT+k39cRMjCW77Pa+sTn00E1wX1nO7ArkJ8NiiZaGWmpj61TPepeI I6wB+D6TbIRffpb+m5P79vq40Yhzl6J9Tr5kLH4LTfLqS1fL1KGNOPcfe5B8Uftm OeyNDeCRDeteuW6QArwfbWPnKi/kIbBiN2/EyUZ8Bz6o8lPh/BveNCY1t0lSDqBi 3S130WOiYLmdRSu/B+zLEyapOW9+jp4xrxcRj78FBIIgnjhxDnjGYbjbWnhBxDGP TbMiuoKJc8fnEb6TGHaut5RGou3fdWDZaLRDIc+b1si7HziwlL5d3gV6tOAUHqby 6AzZiQYf+sUCLIKv0rXbXx+6C8QQYYWCUz1VBLYwbyUP+BNu4hpLbh/oBfT/z2ui CsJTKgXZAy9RNN3Lo6FvHViSUgWCXGXpzwVwvBe4kBIOCJBg2rOggs6oAcNTLUAw DuwEOKpb0p/qJgIn/fNDxw/jfGnNePwi/y6EFuzkhDUYkYL/SPxKzulTuoGiYfwR 75EgQuloV4ecJe2EUIwo6tW45Ypyuvb8lS2f1C3kEbyVnnk5owsjjknC2F/HL3vH GAPbYNZjzBzz369fe5UQj90iP0+Pk5TQ6AtA5Nq9Q1F/3nXVbzk= =ryLH -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Apple APPLE-SA-02-11-2026-4 macOS Sequoia Affected: unknown
guessed Create a notification for this product.
Credits
Apple Product Security via Fulldisclosure
Relationships
reference GCVE-1988-2026-0219 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "APPLE-SA-02-11-2026-4 macOS Sequoia",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-02-11-2026-4 macOS Sequoia 15.7.4\n\nmacOS Sequoia 15.7.4 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/126349.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAppleMobileFileIntegrity\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: An injection issue was addressed with improved validation.\nCVE-2026-20624: Mickey Jin (@patch1t)\n\nAppleMobileFileIntegrity\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-20625: Mickey Jin (@patch1t), Ryan Dowd (@_rdowd)\n\nCompression\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2025-43403: Mickey Jin (@patch1t)\n\nCoreAudio\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted media file may lead to\nunexpected app termination or corrupt process memory\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-20611: Anonymous working with Trend Micro Zero Day Initiative\n\nCoreMedia\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may lead to a denial-of-\nservice or potentially disclose memory contents\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20609: Yi\u011fit Can YILMAZ (@yilmazcanyigit)\n\nGPU Drivers\nAvailable for: macOS Sequoia\nImpact: An attacker may be able to cause unexpected system termination\nor read kernel memory\nDescription: An out-of-bounds read issue was addressed with improved\ninput validation.\nCVE-2026-20620: Murray Mike\n\nImageIO\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20634: George Karchemsky (@gkarchemsky) working with Trend\nMicro Zero Day Initiative\n\nImageIO\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted image may lead to disclosure of\nuser information\nDescription: The issue was addressed with improved bounds checks.\nCVE-2026-20675: George Karchemsky (@gkarchemsky) working with Trend\nMicro Zero Day Initiative\n\nKernel\nAvailable for: macOS Sequoia\nImpact: An attacker in a privileged network position may be able to\nintercept network traffic\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-20671: Xin\u0027an Zhou, Juefei Pu, Zhutian Liu, Zhiyun Qian,\nZhaowei Tan, Srikanth V. Krishnamurthy, Mathy Vanhoef\n\nKernel\nAvailable for: macOS Sequoia\nImpact: A malicious app may be able to gain root privileges\nDescription: This issue was addressed with improved checks.\nCVE-2026-20626: Keisuke Hosoda\n\nlibexpat\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may lead to a denial-of-\nservice\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-59375\n\nlibnetcore\nAvailable for: macOS Sequoia\nImpact: An attacker in a privileged network position may be able to\nintercept network traffic\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-20671: Xin\u0027an Zhou, Juefei Pu, Zhutian Liu, Zhiyun Qian,\nZhaowei Tan, Srikanth V. Krishnamurthy, Mathy Vanhoef\n\nlibxpc\nAvailable for: macOS Sequoia\nImpact: An app may be able to break out of its sandbox\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-20667: an anonymous researcher\n\nMail\nAvailable for: macOS Sequoia\nImpact: Turning off \"Load remote content in messages\u201d may not apply to\nall mail previews\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-20673: an anonymous researcher\n\nMulti-Touch\nAvailable for: macOS Sequoia\nImpact: A malicious HID device may cause an unexpected process crash\nDescription: The issue was addressed with improved bounds checks.\nCVE-2025-43533: Google Threat Analysis Group\nCVE-2025-46300: Google Threat Analysis Group\nCVE-2025-46301: Google Threat Analysis Group\nCVE-2025-46302: Google Threat Analysis Group\nCVE-2025-46303: Google Threat Analysis Group\nCVE-2025-46304: Google Threat Analysis Group\nCVE-2025-46305: Google Threat Analysis Group\n\nPackageKit\nAvailable for: macOS Sequoia\nImpact: An attacker with root privileges may be able to delete protected\nsystem files\nDescription: This issue was addressed through improved state management.\nCVE-2025-46310: Mickey Jin (@patch1t)\n\nRemote Management\nAvailable for: macOS Sequoia\nImpact: An app may be able to gain root privileges\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-20614: Gergely Kalman (@gergely_kalman)\n\nSandbox\nAvailable for: macOS Sequoia\nImpact: An app may be able to break out of its sandbox\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-20628: Noah Gregory (wts.dev)\n\nSecurity\nAvailable for: macOS Sequoia\nImpact: A remote attacker may be able to cause a denial-of-service\nDescription: A logic issue was addressed with improved checks.\nCVE-2025-46290: Bing Shi, Wenchao Li and Xiaolong Bai of Alibaba Group,\nand Luyi Xing of Indiana University Bloomington\n\nShortcuts\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-20653: Enis Maholli (enismaholli.com)\n\nSiri\nAvailable for: macOS Sequoia\nImpact: An attacker with physical access to a locked device may be able\nto view sensitive user information\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-20662: Vivek Dhar, ASI (RM) in Border Security Force, FTR HQ\nBSF Kashmir\n\nSpotlight\nAvailable for: macOS Sequoia\nImpact: A sandboxed app may be able to access sensitive user data\nDescription: The issue was addressed with additional restrictions on the\nobservability of app states.\nCVE-2026-20680: an anonymous researcher\n\nSpotlight\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A privacy issue was addressed with improved checks.\nCVE-2026-20612: Mickey Jin (@patch1t)\n\nStoreKit\nAvailable for: macOS Sequoia\nImpact: An app may be able to identify what other apps a user has\ninstalled\nDescription: A privacy issue was addressed with improved checks.\nCVE-2026-20641: Gongyu Ma (@Mezone0)\n\nSystem Settings\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-20619: Asaf Cohen\n\nUIKit\nAvailable for: macOS Sequoia\nImpact: An app may be able to bypass certain Privacy preferences\nDescription: This issue was addressed by removing the vulnerable code.\nCVE-2026-20606: LeminLimez\n\nVoice Control\nAvailable for: macOS Sequoia\nImpact: An app may be able to crash a system process\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20605: @cloudlldb of @pixiepointsec\n\nWi-Fi\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-20621: Wang Yu of Cyberserval\n\nWindowServer\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2025-43402: @cloudlldb of @pixiepointsec\n\nWindowServer\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause a denial-of-service\nDescription: The issue was addressed with improved handling of caches.\nCVE-2026-20602: @cloudlldb of @pixiepointsec\n\nAdditional recognition\n\nCoreServices\nWe would like to acknowledge YingQi Shi (@Mas0nShi) of DBAppSecurity\u0027s\nWeBin lab for their assistance.\n\nKernel\nWe would like to acknowledge Xinru Chi of Pangu Lab for their\nassistance.\n\nlibpthread\nWe would like to acknowledge Fabiano Anemone for their assistance.\n\nWindowServer\nWe would like to acknowledge @cloudlldb of @pixiepointsec for their\nassistance.\n\nmacOS Sequoia 15.7.4 may be obtained from the Mac App Store or\nApple\u0027s Software Downloads web site:\nhttps://support.apple.com/downloads/\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\nGAPbYNZjzBzz369fe5UQj90iP0+Pk5TQ6AtA5Nq9Q1F/3nXVbzk=\n=ryLH\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T10:07:44Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Feb/24"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Feb/24"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/126349"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Feb/24"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-02-11-2026-4 macOS Sequoia 15.7.4",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2025-43402",
              "type": "related"
            },
            {
              "destId": "CVE-2025-43403",
              "type": "related"
            },
            {
              "destId": "CVE-2025-43533",
              "type": "related"
            },
            {
              "destId": "CVE-2025-46290",
              "type": "related"
            },
            {
              "destId": "CVE-2025-46300",
              "type": "related"
            },
            {
              "destId": "CVE-2025-46301",
              "type": "related"
            },
            {
              "destId": "CVE-2025-46302",
              "type": "related"
            },
            {
              "destId": "CVE-2025-46303",
              "type": "related"
            },
            {
              "destId": "CVE-2025-46304",
              "type": "related"
            },
            {
              "destId": "CVE-2025-46305",
              "type": "related"
            },
            {
              "destId": "CVE-2025-46310",
              "type": "related"
            },
            {
              "destId": "CVE-2025-59375",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20602",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20605",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20606",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20609",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20611",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20612",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20614",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20619",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20620",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20621",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20624",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20625",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20626",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20628",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20634",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20641",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20653",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20662",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20667",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20671",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20673",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20675",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20680",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0219",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Feb/24",
            "automated": true,
            "contentSha256": "e39e0593bbee6ea517f6f450206b44987ff897ace3c3fd6c4b65cc7eb814589a",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Feb/24",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-02-12T00:04:13Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0219"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-08T07:57:42Z",
    "dateUpdated": "2026-09-09T10:07:44Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0219"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.