<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 04:29:43 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-64728</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-64728</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Apple Safari, Apple iOS and iPadOS, Apple macOS, Apple tvOS, Apple visionOS, Apple watchOS&lt;/p&gt;
&lt;p&gt;A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Apple Safari, Apple iOS and iPadOS, Apple macOS, Apple tvOS, Apple visionOS, Apple watchOS&lt;/p&gt;
&lt;p&gt;A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-64728</guid>
    </item>
    <item>
      <title>USN-8703-1 — webkit2gtk vulnerabilities</title>
      <link>https://vulnerability.circl.lu/vuln/usn-8703-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:24.04:LTS: webkit2gtk, Ubuntu:26.04:LTS: webkit2gtk&lt;/p&gt;
&lt;p&gt;Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:24.04:LTS: webkit2gtk, Ubuntu:26.04:LTS: webkit2gtk&lt;/p&gt;
&lt;p&gt;Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-8703-1</guid>
    </item>
  </channel>
</rss>
