CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination.
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to read or write to protected files.
This issue was addressed with improved data protection. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to read sensitive location information.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or write kernel memory.
A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.
This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass sandbox restrictions.
An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.
The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.
A logic issue in macOS was addressed with improved checks. An app may be able to gain root privileges.
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.
A buffer overflow in macOS was addressed with improved bounds checking. A remote attacker may be able to cause unexpected app termination.
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination or read kernel memory.
A use-after-free issue in macOS was addressed with improved memory management. An app may be able to cause unexpected system termination or corrupt kernel memory.
A symlink handling issue in macOS was addressed with improved handling. An app may be able to access user-sensitive data.
An out-of-bounds write in iOS, iPadOS, and macOS was addressed with improved bounds checking. Processing a maliciously crafted file may lead to unexpected app termination.
A buffer overflow in macOS was addressed with improved bounds checking. A sandboxed process may be able to circumvent sandbox restrictions.
An integer overflow in macOS was addressed with improved input validation. Connecting to a malicious VNC server may cause a denial-of-service.
A signature validation issue in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was addressed with improved checks. An attacker in a privileged network position may be able to impersonate a Kerberos KDC.
A use-after-free issue in the Apple kernel was addressed with improved memory management. An app may be able to cause unexpected system termination or corrupt kernel memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

