CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.30)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2023-38593
Medium

A logic issue was addressed with improved checks in macOS and iOS. An app may be able to cause a denial-of-service.

CVE-2023-38580
High

The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.

CVE-2023-38572
HighEPSS 57%

The issue involves the ability of a website to bypass the Same Origin Policy. It has been addressed with improved checks in iOS, iPadOS, tvOS, macOS, Safari, and watchOS.

CVE-2023-38565
High

A path handling issue was addressed with improved validation. An app may be able to gain root privileges.

CVE-2023-38564
High

The issue was addressed with improved checks. An app may be able to modify protected parts of the file system.

CVE-2023-38425
High

The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.

CVE-2023-38424
High

The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.

CVE-2023-38421
Medium

The issue was addressed with improved checks. Processing a 3D model may result in disclosure of process memory.

CVE-2023-38261
High

The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.

CVE-2023-38259
Medium

A logic issue was identified in macOS that could allow apps to access user-sensitive data. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, and macOS Big Sur 11.7.9.

CVE-2023-38258
Medium

The issue was addressed with improved checks. Processing a 3D model may result in disclosure of process memory.

CVE-2023-38136
High

The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.

CVE-2023-35993
High

A use-after-free issue was addressed with improved memory management. This issue is fixed in several versions of Apple operating systems.

CVE-2023-38606
MediumActively exploitedEPSS 58%

The issue involves the potential for an app to modify sensitive kernel state. It has been addressed with improved state management in Apple operating systems.

CVE-2023-38597
HighEPSS 61%

The issue was addressed with improved checks. This issue may lead to arbitrary code execution when processing web content.

CVE-2023-38594
HighEPSS 62%

The issue was addressed with improved checks. Processing web content may lead to arbitrary code execution.

CVE-2023-38410
High

The issue was addressed with improved checks. A user may be able to elevate privileges.

CVE-2023-38133
MediumEPSS 55%

The issue was addressed with improved checks. Processing web content may disclose sensitive information.

CVE-2023-37450
HighActively exploitedEPSS 97%

The issue was addressed with improved checks. Processing web content may lead to arbitrary code execution.

CVE-2023-36862
Medium

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.5.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS