CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.
A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain elevated privileges.
A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has installed.
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution.
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
A vulnerability in macOS was addressed with improved checks. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to gain root privileges.
A permissions issue in macOS was addressed with additional restrictions. The issue is fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
Envoy Gateway in GatewayNamespaceMode has an unauthenticated xDS gRPC server — only a JWT StreamInterceptor is installed, with no UnaryInterceptor, and the streaming interceptor only validates DeltaDiscoveryRequest messages. Any pod that can reach port 18000 can retrieve TLS private keys, xDS resources, backend endpoints, and routing configuration. The issue is fixed in versions 1.7.4 and 1.8.1.
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious afpfs server may lead to kernel memory corruption.
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.
A vulnerability in macOS was addressed with additional entitlement checks. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to gain root privileges.
A race condition in macOS was addressed with improved locking. The issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
The issue was addressed with improved memory handling. The flaw affects iOS 26.6, iPadOS 26.6, iOS 26.7, iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, and watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
An out-of-bounds read was addressed with improved bounds checking. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Processing a maliciously crafted 3D file may lead to an out-of-bounds read.
A validation issue in macOS was addressed with improved input sanitization. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. A remote user may cause an unexpected app termination or arbitrary code execution.
A path handling issue in macOS was addressed with improved validation. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to gain root privileges.
A permissions issue in Apple systems was addressed with additional restrictions. The issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, and visionOS 27. A malicious app may be able to gain root privileges.
A memory corruption issue was addressed with improved input validation in iOS 27, iPadOS 27, and macOS Golden Gate 27. Processing a maliciously crafted file may lead to unexpected app termination.
A use-after-free issue was addressed with improved memory management in Apple systems. Connecting to a malicious NFS server may lead to kernel memory corruption.
A use-after-free issue was addressed with improved memory management in iOS 26.7, iPadOS 26.7, macOS Golden Gate 27, and macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS