CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A file quarantine bypass was addressed with additional checks. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. An archive may be able to bypass Gatekeeper.
An out-of-bounds access issue was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An app may be able to cause unexpected system termination or corrupt kernel memory.
An out-of-bounds write issue was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing a maliciously crafted image may result in memory corruption.
A permissions issue was addressed with improved validation. The vulnerability affects Xcode 27 and macOS Golden Gate 27. An app may be able to access user-sensitive data.
An out-of-bounds write vulnerability in Safari and Apple systems. Processing maliciously crafted web content may lead to memory corruption.
An integer overflow vulnerability in Safari and Apple systems. Processing maliciously crafted web content may lead to memory corruption.
A vulnerability in macOS Golden Gate 27 allows an app to bypass Gatekeeper checks. The issue was addressed with improved checks.
A parsing issue in directory path handling in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. An app may access sensitive user data.
A validation issue in entitlement verification in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. A malicious app may break out of its sandbox.
An issue in snapshot handling in macOS Golden Gate 27. An app may access protected user data.
An authorization issue in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. An app may access sensitive user data.
A memory corruption issue in Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS). An app may cause unexpected system termination.
An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. An app may cause unexpected system termination.
An authentication issue in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.6. An app may cause unexpected system termination.
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution.
This issue was addressed with improved redaction of sensitive information. It is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be able to disclose kernel memory.
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. A malicious application may bypass Gatekeeper checks.
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Connecting to a malicious SMB share may disclose kernel memory.
An out-of-bounds read was addressed with improved bounds checking. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause unexpected system termination.
This issue was addressed with improved checks. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

