CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A use-after-free issue in Safari and Apple operating systems was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.
A vulnerability in processing maliciously crafted web content may lead to an unexpected process crash. The issue was addressed through improved state management and affects multiple Apple products.
A buffer overflow was addressed with improved bounds checking. Processing maliciously crafted web content may lead to an unexpected process crash. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1.
This issue was addressed through improved state management. Processing maliciously crafted web content may lead to an unexpected process crash. The fix is available in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, and visionOS 26.1.
A logging issue was addressed with improved data redaction in iOS 26.1, iPadOS 26.1, and macOS Tahoe 26.1. An app may be able to access sensitive user data.
The issue was addressed with improved memory handling in Safari 26.1, iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, and watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
Multiple issues were addressed by disabling array allocation sinking. The vulnerability affects Safari, iOS, iPadOS, macOS Tahoe and visionOS. Processing maliciously crafted web content may lead to an unexpected process crash.
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.
A permissions issue in macOS was addressed with improved validation. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.
A file quarantine bypass in macOS was addressed with additional checks. The flaw may allow an app to break out of its sandbox.
This issue was addressed with additional entitlement checks. The vulnerability is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1. An app may be able to access user-sensitive data.
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2 and macOS Tahoe 26.1. An app may be able to access sensitive user data.
A permissions issue in macOS was addressed by removing the vulnerable code. The flaw may allow an app to cause a denial-of-service.
A logic issue in macOS was addressed with improved checks. A sandboxed app may be able to access sensitive user data.
An issue with symlink handling was addressed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1. An app may be able to access protected user data.
A privacy issue was addressed with improved handling of temporary files. The vulnerability is fixed in iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1. An app may be able to access sensitive user data.
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data.
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, visionOS 26.1. An app may be able to access sensitive user data.
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS