CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.03)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-112688
HighEPSS 51%

A memory corruption issue was addressed with improved memory handling. The vulnerability affects iOS, iPadOS, and macOS. Parsing a file may lead to an unexpected app termination or arbitrary code execution.

CVE-2026-112682
High

An input validation issue addressed with improved input validation. A remote attacker may be able to cause unexpected app termination.

CVE-2026-112679
High

A use-after-free issue addressed with improved memory management. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-112677
High

An authorization issue addressed with improved access control. An application may be able to execute arbitrary code with system privileges.

CVE-2026-112671
High

A resource exhaustion issue, addressed with improved input validation. It affects iOS, iPadOS, macOS and visionOS. A remote attacker may be able to cause a denial-of-service.

CVE-2026-112670
High

An out-of-bounds write issue in macOS, addressed with improved input validation. Processing a maliciously crafted file may lead to heap corruption. The issue affects macOS Golden Gate, Sequoia and Tahoe.

CVE-2026-112668
High

A logic issue in macOS, addressed with improved checks. An app may be able to gain root privileges. The issue affects macOS Golden Gate, Sequoia and Tahoe.

CVE-2026-112659
High

A type confusion issue was addressed with improved memory handling. The vulnerability affects Safari, iOS, iPadOS, macOS, and visionOS. Processing maliciously crafted web content may lead to arbitrary code execution.

CVE-2026-112655
High

A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to arbitrary code execution.

CVE-2026-112651
High

A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, and visionOS. Processing maliciously crafted web content may lead to arbitrary code execution.

CVE-2026-112639
High

A use-after-free issue in web content processing was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution.

CVE-2026-112638
High

A heap buffer overflow was addressed with improved bounds checking. An attacker in radio range may be able to cause unexpected system termination.

CVE-2026-112637
High

A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to arbitrary code execution.

CVE-2026-112626
High

A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to arbitrary code execution.

CVE-2026-112625
High

An integer underflow was addressed with improved input validation. Processing a maliciously crafted image may result in memory corruption.

CVE-2026-112623
High

A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, and visionOS. Processing maliciously crafted web content may lead to arbitrary code execution.

CVE-2026-112622
High

An out-of-bounds read was addressed with improved bounds checking. An attacker in radio range may be able to cause unexpected system termination.

CVE-2026-112619
High

An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously crafted calendar invitation may lead to memory corruption.

CVE-2026-112593
High

An out-of-bounds write vulnerability in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination or write kernel memory.

CVE-2026-112570
High

An access issue in macOS was addressed with additional sandbox restrictions. An app may be able to break out of its sandbox.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS