CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.10)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An out-of-bounds write issue was addressed with improved input validation in iOS, iPadOS, and macOS. Parsing a maliciously crafted file may lead to unexpected app termination.
An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and watchOS 26.5.
The issue involves the potential disclosure of kernel memory by an app, which could lead to serious security breaches. It has been addressed with improved memory handling in various versions of Apple operating systems.
A permissions issue was addressed with additional restrictions. An app may be able to access protected user data.
Pi-hole, a DNS sinkhole system, has a vulnerability in shell scripts that perform file operations with root privileges without validating paths. An attacker with Pi-hole privileges can exploit this flaw to escalate privileges to root by manipulating SSH keys.
A path handling issue was addressed with improved logic. An app may be able to observe unprotected user data.
The issue was addressed with improved memory handling. Exploitation of this vulnerability may lead to process memory corruption when processing a maliciously crafted image.
An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the js_mapped_arguments_mark function.
A logic issue was addressed with improved restrictions. This issue affects Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) and may allow a malicious app to break out of its sandbox.
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5.
A vulnerability in image processing that could corrupt process memory. The issue was addressed with improved memory handling.
A logging issue was addressed with improved data redaction. An app may be able to leak sensitive kernel state.
A race condition was addressed with additional validation in iOS, iPadOS, macOS, tvOS, and watchOS. This issue is fixed in versions 18.7.9 and 26.5 for iOS and iPadOS, as well as in the corresponding versions for macOS, tvOS, and watchOS.
Type checking was improved in Apple systems. A remote attacker may be able to cause a denial of service.
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5.
An information leakage was addressed with additional validation in macOS Tahoe 26.5, which could allow an app to gain root privileges.
This issue was addressed with improved checks to prevent unauthorized actions. An app may be able to cause a denial-of-service.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9, iPadOS 18.7.9, iOS 26.5, iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5.
A privacy issue was addressed with improved checks. A user may be able to view restricted content from the lock screen.
An inconsistent user interface issue was addressed with improved state management. An app may be able to access sensitive user data.