CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An out-of-bounds write issue was addressed with improved bounds checking. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2 and visionOS 27.2. An app may be able to cause unexpected system termination or corrupt process memory.
An out-of-bounds read in font processing was addressed with improved bounds checking. Processing a maliciously crafted font may result in the disclosure of process memory.
An out-of-bounds read was addressed with improved bounds checking. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2 and visionOS 27.2. Processing a maliciously crafted image may lead to unexpected app termination.
An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected app termination. The issue is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected app termination. The issue is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.2.
This issue was addressed with improved data access restriction. An app may be able to access sensitive user data.
An access issue was addressed with improved access restrictions. An app may be able to access sensitive user data.
An information disclosure issue in macOS was addressed with improved logic. The flaw affects macOS Golden Gate 27.2 and may allow an app to access sensitive user data.
An authorization issue was addressed with improved access control. The flaw affects iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2, allowing an app to access sensitive user data.
A use-after-free issue was addressed with improved memory management. The flaw affects Safari 27.2, iOS/iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2, and processing maliciously crafted web content may lead to unexpected process termination.
An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected app termination. The issue is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and macOS Tahoe 26.7.2.
A path handling issue was addressed with improved validation. The flaw affects iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2, allowing an attacker with physical access to a trust-paired device to read and write arbitrary files.
This issue was addressed with improved checks. The flaw affects iOS 27.2 and iPadOS 27.2, allowing an app to access sensitive user data.
A use-after-free vulnerability in Safari and Apple operating systems was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.
A privacy vulnerability in macOS was addressed by moving sensitive data. An app may be able to access sensitive user data.
A memory integrity vulnerability in Apple operating systems was addressed with improved handling of copy-on-write pages. An app may be able to cause unexpected changes to copy-on-write memory.
A memory initialization vulnerability in Apple operating systems was addressed with improved memory handling. Processing a maliciously crafted image may result in disclosure of process memory.
A logic issue in macOS was addressed with improved checks. Processing a maliciously crafted file may bypass Gatekeeper checks.
A null pointer dereference was addressed with improved validation. An attacker in physical proximity may be able to cause a denial-of-service.
An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted image may result in disclosure of process memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS