CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A use-after-free issue was addressed with improved memory management. The issue affects Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
A use-after-free issue was addressed with improved memory management. The issue affects Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
The issue was addressed with additional entitlement checks. The vulnerability affects iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. An app may be able to access sensitive user data.
An out-of-bounds write issue was addressed with improved input validation. The issue affects iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, and watchOS 27.2. An app may be able to cause unexpected system termination.
The issue was addressed by removing the vulnerable code. The vulnerability affects iOS 27.2 and iPadOS 27.2, and tvOS 27.2. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory.
An authorization issue was addressed with improved state management. The vulnerability affects iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. An app may be able to access sensitive user data.
A state management issue in the web content processing component. Processing maliciously crafted web content may lead to an unexpected process crash.
An entitlement issue addressed with additional entitlement checks. An app may be able to fingerprint the user.
An out-of-bounds read in the web content processing component, addressed with improved bounds checking. Processing maliciously crafted web content may result in the disclosure of process memory.
A permissions issue addressed with additional restrictions. An app may be able to access sensitive user data.
An entitlement issue addressed with additional entitlement checks. An app may be able to access sensitive user data.
A type confusion issue in web content processing, addressed with improved state handling. The flaw affects Safari, iOS, iPadOS, macOS and visionOS. Processing maliciously crafted web content may lead to an unexpected process termination.
A flaw in the macOS Gatekeeper mechanism, addressed with improved checks. A maliciously crafted ZIP archive may bypass Gatekeeper checks. The issue affects macOS Golden Gate, Sequoia and Tahoe.
A race condition issue, addressed with improved state handling. It affects Safari, iOS, iPadOS, macOS, tvOS and watchOS. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A use-after-free issue, addressed with improved memory management. It affects Safari, iOS, iPadOS, macOS, tvOS and watchOS. Processing maliciously crafted web content may lead to an unexpected process termination.
An issue addressed with improved input validation. It affects iOS, iPadOS and macOS. An app may be able to access sensitive user data.
A use-after-free issue in web content processing was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process termination.
A use-after-free issue in web content processing was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process termination.
A logic issue was addressed with improved state management. A malicious app may be able to bypass certificate validation.
An access issue was addressed with additional sandbox restrictions. An app may be able to access sensitive user data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS