CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A cryptographic issue, addressed with improved integrity checks. The flaw affects iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, and watchOS 27. An attacker in a privileged network position may be able to modify network traffic.
An out-of-bounds read issue in Apple systems was addressed with improved input validation. Opening a maliciously crafted file may cause unexpected process termination or disclose process memory.
An out-of-bounds write issue in Apple systems was addressed with improved bounds checking. Processing maliciously crafted NTLM input may lead to unexpected app termination.
An information disclosure issue in Apple systems was addressed with improved memory management. An app may be able to disclose kernel memory.
A logging issue in Apple systems was addressed with improved data redaction. An app may be able to access sensitive user data.
An out-of-bounds write issue in Apple systems was addressed with improved bounds checking. Processing a maliciously crafted 3D scene may lead to unexpected process termination.
A logging issue in Apple systems was addressed with improved data redaction. An app may be able to access user-sensitive data.
An out-of-bounds read vulnerability in Apple systems, fixed by improved bounds checking. Processing a maliciously crafted font file may lead to unexpected app termination.
An out-of-bounds write vulnerability in Apple systems, fixed by improved bounds checking. An app may be able to cause unexpected system termination or write kernel memory.
A race condition vulnerability in macOS Golden Gate, fixed by improved state management. An app may be able to access sensitive user data.
A use-after-free vulnerability in Apple systems, fixed by improved memory management. An app may be able to cause unexpected system termination.
A buffer overflow vulnerability in macOS Golden Gate, fixed by improved size validation. A local attacker may be able to cause unexpected system termination or corrupt kernel memory.
An out-of-bounds write vulnerability in Apple systems, fixed by improved bounds checking. Mounting a disk image with maliciously crafted files may lead to unexpected system termination.
This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed.
An integer overflow vulnerability in macOS systems, fixed by improved input validation. An app may be able to cause unexpected system termination.
An out-of-bounds read vulnerability in macOS systems, fixed by improved bounds checking. Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory.
An out-of-bounds write vulnerability in macOS systems, fixed by improved bounds checking. Connecting to a malicious SMB server may lead to kernel memory corruption.
A vulnerability in macOS systems, fixed by additional entitlement checks. An app may be able to modify protected parts of the file system.
A privacy issue was addressed with improved private data redaction for log entries. A malicious application may be able to determine a user's current location.
A buffer overflow was addressed with improved bounds checking. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS