CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-112540
Medium

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination.

CVE-2026-112539
High

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to read or write to protected files.

CVE-2026-112537
Medium

This issue was addressed with improved data protection. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to read sensitive location information.

CVE-2026-112536
High

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or write kernel memory.

CVE-2026-112535
Medium

A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.

CVE-2026-112534
High

This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass sandbox restrictions.

CVE-2026-112533
Medium

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.

CVE-2026-112532
High

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-112531
High

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.

CVE-2026-112530
High

A logic issue in macOS was addressed with improved checks. An app may be able to gain root privileges.

CVE-2026-112529
High

An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.

CVE-2026-112526
CriticalEPSS 58%

A buffer overflow in macOS was addressed with improved bounds checking. A remote attacker may be able to cause unexpected app termination.

CVE-2026-112525
High

An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination or read kernel memory.

CVE-2026-112524
High

A use-after-free issue in macOS was addressed with improved memory management. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-112523
Medium

A symlink handling issue in macOS was addressed with improved handling. An app may be able to access user-sensitive data.

CVE-2026-112522
Medium

An out-of-bounds write in iOS, iPadOS, and macOS was addressed with improved bounds checking. Processing a maliciously crafted file may lead to unexpected app termination.

CVE-2026-112521
Critical

A buffer overflow in macOS was addressed with improved bounds checking. A sandboxed process may be able to circumvent sandbox restrictions.

CVE-2026-112519
High

An integer overflow in macOS was addressed with improved input validation. Connecting to a malicious VNC server may cause a denial-of-service.

CVE-2026-112518
Medium

A signature validation issue in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was addressed with improved checks. An attacker in a privileged network position may be able to impersonate a Kerberos KDC.

CVE-2026-112517
High

A use-after-free issue in the Apple kernel was addressed with improved memory management. An app may be able to cause unexpected system termination or corrupt kernel memory.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS