Critical CVE-2026-47430 ## Summary The iOS implementation of `cordova-plugin-inappbrowser` passes the `id` field from a `WKScriptMessage` body to `commandDelegate sendPluginResult:callbackId:` with no format validation (`CDVWKInAppBrowser.m:560–574`). Any web content loaded inside the InAppBrowser...

#Sicherheitslücke #Apple #Browser

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Critical] CVE-2026-47430 – ## Summary The iOS implementation of `cordova-plugin-inappbrowser` passes the `...

VERWANDTEARTIKEL

Check Point VPN 0-day Vulnerability Exploited in the Wild to Deploy Ransomware

CVE-2026-25555 - OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header

CVE-2026-25559 - OpenBullet2 0.3.2 Path Traversal via Wordlist Endpoint

CVE-2026-25856 - OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interface

CVE-2026-25855 - OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Upload

CVE-2026-49755 - Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies