CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Quest KACE SMA 11.0.273 ships with default credentials for the kbftp account (password getbxf), which is publicly known. A remote attacker can gain privileged access to the FTP service containing MySQL backups with sensitive data.
Quest KACE SMA 11.0.273 ships with default credentials for the MySQL accounts report and R1 (password box747), which is publicly known. A remote attacker can gain privileged access to MySQL databases containing sensitive data.
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
An out-of-bounds read vulnerability that could allow a remote attacker to cause unexpected app termination. The issue was addressed with improved input validation.
An integer overflow was addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
An integer overflow was addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
An out-of-bounds write vulnerability in Apple systems. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
An out-of-bounds write vulnerability in Apple systems, fixed by removing the vulnerable code. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
A vulnerability in Apple products (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) due to insufficient bounds checks when processing files. Processing a maliciously crafted file may lead to unexpected app termination.
A memory corruption issue was addressed with improved state management. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A vulnerability in Apple systems related to improper memory handling. An app may be able to cause unexpected system termination or corrupt kernel memory.
A buffer overflow was addressed with improved size validation. An app may be able to execute arbitrary code with kernel privileges.
An out-of-bounds write vulnerability that could allow an attacker to cause unexpected app termination. The issue was addressed with improved bounds checking.
An authorization issue in macOS. State management was improved. A malicious app may be able to break out of its sandbox.
An out-of-bounds write vulnerability in Apple systems. An app may be able to cause a denial-of-service.
An out-of-bounds access issue was addressed with improved bounds checking. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A vulnerability in Apple systems related to improper memory handling. Processing a maliciously crafted image may corrupt process memory.
The issue was addressed with improved checks. The fix is included in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Websites may know if the user has visited a given link.
An out-of-bounds read vulnerability in Apple systems. An app may be able to cause a denial-of-service.
In the Linux kernel, KVM for ARM64 in kvm_hyp_handle_mops() lacks translation of the synthetic SPSR_EL2 value before writing to hardware in nested virtualization. This causes incorrect SPSR_EL2 restoration.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS