CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.10)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
This issue was addressed with improved access restrictions. The vulnerability may lead to the disclosure of sensitive user information due to processing maliciously crafted web content.
A buffer overflow was addressed with improved bounds checking. This issue is fixed in several versions of Apple operating systems.
A vulnerability in WebKit allows a process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.
A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 18.7.9, iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5.
A vulnerability in WebKit may cause an unexpected process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.
An integer overflow issue was addressed with improved input validation in iOS, iPadOS, and macOS. An app may be able to cause unexpected system termination.
An authorization issue was addressed with improved state management. An app may be able to gain root privileges.
A use-after-free vulnerability in WebKit that could lead to an unexpected Safari crash when processing maliciously crafted web content. The issue was addressed with improved memory management.
The issue concerns improper memory handling, which may lead to unexpected process crashes when processing maliciously crafted web content. The issue is fixed in Safari 26.5, iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, and visionOS 26.5.
A logging issue was addressed with improved data redaction. An app may be able to determine kernel memory layout.
The issue was addressed with improved checks. Processing a maliciously crafted file may lead to denial-of-service or potentially disclose memory contents.
The issue concerns improper memory handling that may lead to process memory corruption when processing a maliciously crafted image. It has been fixed in several versions of Apple operating systems.
A vulnerability in Apple systems that may lead to unexpected app termination when processing a maliciously crafted file.
A permissions issue was addressed with additional restrictions. An app may be able to access protected user data.
A logic issue was addressed with improved checks. Replying to an email could display remote images in Mail in Lockdown Mode.
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5.
A race condition was addressed with improved handling of symbolic links. An app may be able to access Contacts without user consent.
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5.
A consistency issue was addressed with improved state handling. An app may be able to gain root privileges.
A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to gain root privileges.