CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A missing release of memory after effective lifetime vulnerability in mdex and mdex_native allows an attacker who controls a rendered document to cause a denial of service through unbounded native memory exhaustion. The native rendering code permanently leaks memory when rendering a document containing escaped-tag nodes, leading to unlimited memory consumption and process crash.
A use-after-free vulnerability in Safari was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash.
An out-of-bounds write vulnerability in Safari, fixed with improved input validation. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A race condition was addressed with improved state handling. This vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
A use-after-free vulnerability in Safari, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.
In Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, and watchOS 26.6, memory handling was improved. Processing maliciously crafted web content may result in the disclosure of process memory.
A use-after-free vulnerability in Safari, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.
A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may disclose sensitive user information.
A use-after-free vulnerability in Safari, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A use-after-free vulnerability in WebKit, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.
A vulnerability in Apple operating systems, fixed with improved input sanitization. An app may be able to leak sensitive kernel state.
This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to silently hijack clipboard data.
A use-after-free vulnerability in Safari, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A stack overflow was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A use-after-free vulnerability in WebKit, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A vulnerability in Safari may cause a browser crash when processing maliciously crafted web content. The issue was addressed with improved memory handling. Fixes are included in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2.
A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website may leak sensitive data.
A memory handling issue in WebKit (Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) may lead to an unexpected process crash when processing maliciously crafted web content.
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.
An issue fixed with improved input validation. A malicious website may exfiltrate data cross-origin.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS