CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An out-of-bounds write issue in Apple products was addressed with improved bounds checking. A remote attacker may be able to cause unexpected app termination or arbitrary code execution. This issue is fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.
An integer overflow vulnerability in Apple systems, fixed with improved input validation. An app may cause a denial of service.
A null pointer dereference vulnerability in Apple systems, fixed with improved input validation. Processing web content may lead to a denial-of-service.
A path handling issue in Apple systems, fixed with improved validation. An app may be able to modify protected parts of the file system.
A vulnerability in Apple systems, fixed with improved checks. An app may cause unexpected system termination.
A type confusion issue in Apple systems, fixed with improved memory handling. An app may cause a denial of service.
An integer overflow vulnerability in Apple systems, fixed with improved input validation. An app may cause unexpected system termination.
A use after free issue in Apple systems, fixed with improved memory management. An app may cause unexpected system termination.
A logic issue was addressed with improved validation. The vulnerability affects iOS, iPadOS, macOS, tvOS, and visionOS. An app may be able to access sensitive user data.
A memory initialization issue was addressed with improved memory handling. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An app may be able to determine kernel memory layout.
An authorization issue was addressed with improved state management. The vulnerability affects iOS, iPadOS, and macOS. A malicious application may be able to bypass Privacy preferences.
This issue was addressed with improved checks. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. An app may be able to access sensitive user data.
A use after free issue was addressed with improved memory management. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An app may be able to cause unexpected system termination.
A race condition was addressed with improved state handling. The vulnerability affects macOS Golden Gate 27 and macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
A file quarantine bypass was addressed with additional checks. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. An archive may be able to bypass Gatekeeper.
An out-of-bounds access issue was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An app may be able to cause unexpected system termination or corrupt kernel memory.
An out-of-bounds write issue was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing a maliciously crafted image may result in memory corruption.
A permissions issue was addressed with improved validation. The vulnerability affects Xcode 27 and macOS Golden Gate 27. An app may be able to access user-sensitive data.
An out-of-bounds write vulnerability in Safari and Apple systems. Processing maliciously crafted web content may lead to memory corruption.
An integer overflow vulnerability in Safari and Apple systems. Processing maliciously crafted web content may lead to memory corruption.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS