CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
WebKit in iOS before version 10 and Safari before version 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website.
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
WebKit in iOS before version 10 and Safari before version 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website.
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, allowing remote attackers to execute arbitrary code via a crafted web site.
IOThunderboltFamily in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted web site.
IOAcceleratorFamily in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
The Intel Graphics Driver in Apple OS X before version 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
A vulnerability in diskutil in DiskArbitration in Apple OS X before version 10.12 allows local users to gain privileges via unspecified vectors.
CoreCrypto in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted app.
CCrypt in corecrypto in CommonCrypto in Apple iOS before version 10 and OS X before version 10.12 allows attackers to discover cleartext information by leveraging a function call that specifies the same buffer for input and output.
WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage 'type confusion.'
WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage 'type confusion'.
Bluetooth in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
In Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, a vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
AppleMobileFileIntegrity in Apple iOS before version 10 and OS X before version 10.12 mishandles process entitlement and Team ID values in the task port inheritance policy, allowing attackers to execute arbitrary code in a privileged context.