CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.04)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-64703
Critical

A use after free issue was addressed with improved memory management. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to cause a denial-of-service.

CVE-2026-64702
Critical

An access issue was addressed with additional sandbox restrictions. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to break out of its sandbox.

CVE-2026-64700
Critical

A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.

CVE-2026-64698
Critical

A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. An app may cause unexpected system termination or read kernel memory.

CVE-2026-64697
Critical

A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. An app may cause unexpected system termination or corrupt kernel memory.

CVE-2026-64696
CriticalEPSS 53%

A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. A remote user may cause unexpected system termination or corrupt kernel memory.

CVE-2026-64695
CriticalEPSS 54%

The issue was addressed with improved memory handling. The vulnerability affects Apple systems and may allow a remote user to cause unexpected system termination or corrupt kernel memory.

CVE-2026-64694
Critical

An integer overflow issue was fixed with improved input validation. The vulnerability affects macOS systems. An app may cause unexpected system termination.

CVE-2026-64691
Critical

A buffer overflow issue was fixed with improved size validation. The vulnerability affects macOS Tahoe. An app may cause unexpected system termination.

CVE-2026-64551
Critical

In the Linux kernel, SCTP's handling of STALE_COOKIE error in COOKIE_ECHOED state reads the staleness field from the first error cause instead of the STALE_COOKIE cause, leading to out-of-bounds read and uninitialized memory leak.

CVE-2026-64541
Critical

A use-after-free (UAF) vulnerability was found in the Linux kernel's smc_cdc_rx_handler() function for the SMC-R protocol. The issue occurs because no socket reference is held after releasing the conns_lock, allowing a concurrent close() to free memory before sock_hold() is called.

CVE-2026-43822
Critical

A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.

CVE-2026-43814
Critical

Memory management was improved to fix a use-after-free issue. An app may be able to cause unexpected system termination.

CVE-2026-43812
Critical

A use after free issue was addressed with improved memory management. Affects iOS, iPadOS, macOS, tvOS, and visionOS. An app may cause unexpected system termination.

CVE-2026-43810
Critical

The issue was addressed with improved memory handling. The vulnerability affects Apple systems and may allow a remote user to cause unexpected system termination or corrupt kernel memory.

CVE-2026-43809
Critical

An out-of-bounds read was addressed with improved bounds checking. Affects iOS, iPadOS, macOS. An app may cause unexpected system termination.

CVE-2026-43807
Critical

A buffer overflow was addressed with improved bounds checking. The vulnerability affects Apple systems and may allow a malicious accessory to cause unexpected app termination.

CVE-2026-43805
Critical

A race condition in Apple systems. Fixed by improving state handling. An app may cause unexpected system termination or write kernel memory.

CVE-2026-43803
Critical

An out-of-bounds write issue was addressed with improved bounds checking. The vulnerability affects Apple systems and may allow a remote attacker to cause unexpected system termination.

CVE-2026-43802
Critical

An out-of-bounds write issue was addressed with improved bounds checking. Affects iOS, iPadOS, macOS. An app may cause unexpected system termination.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS