CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Go JOSE, a Go implementation of the JOSE standards (JWE, JWS, JWT), prior to 4.1.6 parses attacker-controlled RSA modulus and prime values from JWKs without enforcing size and consistency bounds before passing them to crypto/rsa.PrivateKey.Validate. On Go 1.24 and later, crafted large or degenerate RSA parameters can make validation consume cubic CPU time, allowing remote denial of service.
A memory handling vulnerability was fixed across multiple Apple platforms (iOS, iPadOS, macOS, tvOS, visionOS, watchOS). Processing a maliciously crafted video file may lead to unexpected app termination.
A buffer overflow was addressed with improved bounds checking in Apple platforms (iOS, iPadOS, macOS, visionOS). Processing a maliciously crafted file may lead to unexpected process termination.
A buffer overflow was addressed with improved size validation. Processing a maliciously crafted audio file may lead to memory corruption. The issue affects iOS/iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.
An access issue was addressed with improved access control. A malicious app may be able to access restricted system interfaces or launder launch attribution. The issue affects iOS/iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2.
A null pointer dereference was addressed with improved input validation. An app may be able to cause unexpected system termination. The issue affects iOS/iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, and watchOS 27.
A use-after-free in macOS was addressed with improved memory management. The issue may be exploited by an app to cause unexpected system termination or corrupt kernel memory.
A logic issue in macOS was addressed with improved checks. An app may be able to gain root privileges. This affects Golden Gate, Sequoia and Tahoe versions.
An out-of-bounds write issue in macOS was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to arbitrary code execution.
A use-after-free issue was addressed with improved memory management. The flaw affected iOS, iPadOS, and macOS and could allow an app to execute arbitrary code with kernel privileges. It was fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.2.
A permissions issue in Apple systems was addressed with additional restrictions. The flaw affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2 and macOS Tahoe 26.7.2. A malicious app may be able to gain root privileges.
A buffer overflow in Apple systems was addressed with improved bounds checking. The flaw affects iOS/iPadOS 26.7.2, iOS/iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2 and visionOS 27. Processing a maliciously crafted image may lead to heap corruption.
A stack buffer overflow in macOS can be triggered by processing a maliciously crafted audit file, corrupting process memory. The issue was addressed through improved input validation and is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A memory handling issue in Apple systems allows an app to cause unexpected system termination or corrupt kernel memory. The issue is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.
A use after free issue in macOS allows an app with App Sandbox restrictions to escape the sandbox and execute code with root privileges. The issue was addressed with improved memory management and is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A use-after-free issue in Apple systems was addressed with improved memory management. An app may be able to cause unexpected system termination or write kernel memory.
An out-of-bounds write issue in Apple systems was addressed with improved bounds checking. An app may be able to cause unexpected system termination or write kernel memory.
An out-of-bounds write issue in Apple systems was addressed with improved bounds checking. A buffer overflow may result in memory corruption and unexpected app termination.
A permissions issue in macOS was addressed with additional restrictions. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. A malicious app may be able to gain root privileges.
An issue in Apple systems was addressed with improved checks. The issue affects iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS