CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An issue in Apple systems was addressed with improved checks. A malicious application may be able to bypass Privacy preferences.
A use after free issue was addressed with improved memory management. An app may be able to gain root privileges.
An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted file may lead to unexpected app termination.
A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to gain root privileges.
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or write kernel memory.
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.
A logic issue in macOS was addressed with improved checks. An app may be able to gain root privileges.
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.
An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination or read kernel memory.
A use-after-free issue in the Apple kernel was addressed with improved memory management. An app may be able to cause unexpected system termination or corrupt kernel memory.
A symlink validation issue was addressed with improved validation in macOS. An app may be able to break out of its sandbox.
An out-of-bounds write issue was addressed with improved bounds checking in macOS. A remote attacker may be able to cause a denial-of-service.
An out-of-bounds write issue was addressed with improved bounds checking in iOS and iPadOS. An app may be able to cause unexpected system termination or write kernel memory.
An out-of-bounds write issue was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and a malicious Screen Sharing peer may be able to corrupt process memory.
An out-of-bounds read was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and an app may be able to cause unexpected system termination or read kernel memory.
A downgrade issue in macOS was addressed with additional version checks. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to gain root privileges.
A race condition in macOS was addressed with additional validation. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to gain root privileges.
A path handling issue was addressed with improved validation. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to gain root privileges.
An out-of-bounds write was addressed with improved bounds checking. The issue affects iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.2. Processing a 3D model may lead to unexpected app termination.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS