CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A memory corruption issue was addressed with improved memory handling. The vulnerability affects iOS, iPadOS, and macOS. Parsing a file may lead to an unexpected app termination or arbitrary code execution.
An input validation issue addressed with improved input validation. A remote attacker may be able to cause unexpected app termination.
A use-after-free issue addressed with improved memory management. An app may be able to cause unexpected system termination or corrupt kernel memory.
An authorization issue addressed with improved access control. An application may be able to execute arbitrary code with system privileges.
A resource exhaustion issue, addressed with improved input validation. It affects iOS, iPadOS, macOS and visionOS. A remote attacker may be able to cause a denial-of-service.
An out-of-bounds write issue in macOS, addressed with improved input validation. Processing a maliciously crafted file may lead to heap corruption. The issue affects macOS Golden Gate, Sequoia and Tahoe.
A logic issue in macOS, addressed with improved checks. An app may be able to gain root privileges. The issue affects macOS Golden Gate, Sequoia and Tahoe.
A type confusion issue was addressed with improved memory handling. The vulnerability affects Safari, iOS, iPadOS, macOS, and visionOS. Processing maliciously crafted web content may lead to arbitrary code execution.
A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to arbitrary code execution.
A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, and visionOS. Processing maliciously crafted web content may lead to arbitrary code execution.
A use-after-free issue in web content processing was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution.
A heap buffer overflow was addressed with improved bounds checking. An attacker in radio range may be able to cause unexpected system termination.
A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to arbitrary code execution.
A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to arbitrary code execution.
An integer underflow was addressed with improved input validation. Processing a maliciously crafted image may result in memory corruption.
A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, and visionOS. Processing maliciously crafted web content may lead to arbitrary code execution.
An out-of-bounds read was addressed with improved bounds checking. An attacker in radio range may be able to cause unexpected system termination.
An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously crafted calendar invitation may lead to memory corruption.
An out-of-bounds write vulnerability in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination or write kernel memory.
An access issue in macOS was addressed with additional sandbox restrictions. An app may be able to break out of its sandbox.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

