CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.20)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Safari that was fixed through improved state management. The issue affects Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A vulnerability in Safari that was fixed through improved state management. The issue affects Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A memory corruption vulnerability in Safari, fixed through improved state management. The issue affects Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A vulnerability in Safari that was fixed through improved state management. The issue affects Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A vulnerability in Safari that was fixed through improved state management. The issue affects Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
The issue was addressed through improved state management. The vulnerability affects Safari, iOS, iPadOS, and macOS. Processing maliciously crafted web content may lead to an unexpected Safari crash.
The issue was addressed with improved memory handling. The fix is available in iOS 26.6.1 and iPadOS 26.6.1, and macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
An authentication issue was addressed with improved state management. The fix is available in iOS 26.6.1 and iPadOS 26.6.1. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic.
The issue was addressed with improved memory handling. The fix is available in iOS 26.6.1 and iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.
A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, and macOS. Processing maliciously crafted web content may lead to an unexpected process termination.
An out-of-bounds access issue was addressed with improved bounds checking. The vulnerability affects Safari, iOS, iPadOS, and macOS. Processing maliciously crafted web content may lead to an unexpected Safari crash.
The issue was addressed with improved input validation. Fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
The issue was addressed with improved checks. Fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
The issue was addressed with improved checks. The vulnerability affects Safari, iOS, iPadOS, and macOS. Visiting a maliciously crafted website may leak sensitive data.
An information leakage was fixed with additional validation. An app may be able to leak sensitive kernel state.
A use-after-free issue was addressed with improved memory management. Fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Onyx is an open-source AI platform. Prior to 4.3.0, the Enterprise Edition lacks enforcement of curator permission validation in the PATCH /manage/admin/user-group/{user_group_id} and POST /manage/admin/user-group/{user_group_id}/add-users endpoints, allowing a curator to add accounts to arbitrary groups and gain document access. This is fixed in version 4.3.0.
Dokploy is a free, self-hostable PaaS. Prior to 0.29.6, the user update procedure does not delete other session rows after a password change, allowing a compromised session token to remain valid for up to three days. This is fixed in version 0.29.6.
The issue was addressed with improved memory handling. The vulnerability affects Safari, iOS, iPadOS, and macOS. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A reachable assertion was addressed with improved input validation. An attacker in a privileged network position may be able to cause a denial-of-service.