CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The issue was addressed with improved checks. Processing a maliciously crafted file may lead to denial-of-service or potentially disclose memory contents.
The issue concerns improper memory handling that may lead to process memory corruption when processing a maliciously crafted image. It has been fixed in several versions of Apple operating systems.
A vulnerability in Apple systems that may lead to unexpected app termination when processing a maliciously crafted file.
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.5. An app may be able to access protected user data.
A logic issue was addressed with improved checks. Replying to an email could display remote images in Mail in Lockdown Mode.
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5.
A race condition was addressed with improved handling of symbolic links. An app may be able to access Contacts without user consent.
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5.
A consistency issue was addressed with improved state handling. An app may be able to gain root privileges.
A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to gain root privileges.
The issue concerns improper memory handling, which may lead to unexpected process crashes when processing maliciously crafted web content. It has been fixed in Safari 26.5, iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and watchOS 26.5.
A denial of service issue was addressed by removing the vulnerable code. An app may be able to modify protected parts of the file system.
The issue concerns improper input validation, which may lead to the Content Security Policy not being enforced. It has been fixed in Safari 26.5 and iOS 18.7.9.
This issue was addressed through improved state management. An attacker may be able to track users through their IP address.
A vulnerability in WebKit allows a process crash when processing maliciously crafted web content. The issue was fixed by improved memory handling in Safari 26.5, iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and visionOS 26.5.
A vulnerability in WebKit allows a process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.
A use-after-free vulnerability in Safari and other Apple products may lead to an unexpected process crash when processing maliciously crafted web content. The issue was addressed with improved memory management.
This issue was addressed with additional entitlement checks. An app may be able to circumvent App Privacy Report logging.
A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4.
The issue was addressed with improved input validation. Local attacks may lead to modification of the Keychain state.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS