CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in image processing that could corrupt process memory. The issue was addressed with improved memory handling.
A logging issue was addressed with improved data redaction. An app may be able to leak sensitive kernel state.
A race condition was addressed with additional validation in iOS, iPadOS, macOS, tvOS, and watchOS. This issue is fixed in versions 18.7.9 and 26.5 for iOS and iPadOS, as well as in the corresponding versions for macOS, tvOS, and watchOS.
Type checking was improved in Apple systems. A remote attacker may be able to cause a denial of service.
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5.
An information leakage was addressed with additional validation in macOS Tahoe 26.5, which could allow an app to gain root privileges.
This issue was addressed with improved checks to prevent unauthorized actions. An app may be able to cause a denial-of-service.
A use-after-free vulnerability was fixed with improved memory management. The issue affects Apple systems and was resolved in multiple versions of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An app may cause unexpected system termination.
A privacy issue was addressed with improved checks. A user may be able to view restricted content from the lock screen.
An inconsistent user interface issue was addressed with improved state management. An app may be able to access sensitive user data.
This issue was addressed with improved access restrictions. The vulnerability may lead to the disclosure of sensitive user information due to processing maliciously crafted web content.
A buffer overflow was addressed with improved bounds checking. This issue is fixed in several versions of Apple operating systems.
A vulnerability in WebKit allows a process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.
A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 18.7.9, iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5.
A vulnerability in WebKit may cause an unexpected process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.
An integer overflow issue was addressed with improved input validation in iOS, iPadOS, and macOS. An app may be able to cause unexpected system termination.
An authorization issue was addressed with improved state management. An app may be able to gain root privileges.
A use-after-free vulnerability in WebKit that could lead to an unexpected Safari crash when processing maliciously crafted web content. The issue was addressed with improved memory management.
The issue concerns improper memory handling, which may lead to unexpected process crashes when processing maliciously crafted web content. The issue is fixed in Safari 26.5, iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, and visionOS 26.5.
A logging issue was addressed with improved data redaction. An app may be able to determine kernel memory layout.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS