CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The issue was addressed through improved state management. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A logic issue was addressed with improved checks in Apple systems. The vulnerability affected iOS 18.7.11 and iPadOS 18.7.11, iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27, and could allow an app to leak sensitive user information.
The issue was addressed with improved memory handling. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
The issue was addressed through improved state management. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
The issue was addressed through improved state management. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
The issue was addressed through improved state management. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A memory corruption issue was addressed with improved state management. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A vulnerability in the WebKit component of Safari was addressed through improved state management. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A vulnerability in the WebKit component of Safari was addressed through improved state management. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A vulnerability in the WebKit component of Safari was addressed through improved state management. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A memory handling issue addressed with improved memory handling affects iOS, iPadOS, macOS Sequoia, macOS Tahoe, tvOS, visionOS, and watchOS. An app may be able to cause unexpected system termination or corrupt kernel memory.
An authentication issue addressed with improved state management affects iOS and iPadOS. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic.
MLflow versions 3.3.0 through 3.15.0 contain an SSRF vulnerability in the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint. URL validation is only performed on the original URL, while the webhook delivery mechanism follows redirects and re-resolves the hostname without pinning the validated address. Attackers can thereby reach internal or cloud metadata services and read response_status and response_body.
The issue was addressed with improved memory handling. This vulnerability affects Apple systems and may lead to memory corruption when processing maliciously crafted web content.
A use-after-free issue in the web content processing component was addressed with improved memory management. The flaw affects Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to an unexpected process termination.
An out-of-bounds access vulnerability in Safari was addressed with improved bounds checking. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A memory corruption vulnerability was addressed with improved locking. The issue affects Safari, iOS, iPadOS, macOS, and visionOS. Processing maliciously crafted web content may lead to an unexpected Safari crash.
The issue was addressed with improved input validation. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
The issue was addressed with improved checks. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS