CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
This issue was addressed with improved file handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may be able to execute arbitrary code with system privileges.
A permissions issue in macOS was addressed with additional restrictions. A user with screen sharing access may be able to view another user's screen.
An out-of-bounds read was addressed with improved bounds checking. An app may be able to cause unexpected system termination.
A use-after-free issue was addressed with improved memory management. An app may be able to cause unexpected system termination or write kernel memory.
An authorization issue was addressed with improved state management. An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac.
An out-of-bounds write issue was addressed with improved bounds checking. An app may be able to cause unexpected system termination or corrupt kernel memory.
An out-of-bounds read in Apple systems was addressed with improved input validation. The flaw affects iOS, iPadOS, macOS, tvOS, visionOS and watchOS. An app may be able to cause unexpected system termination or read kernel memory.
An out-of-bounds write in Apple systems was addressed with improved input validation. The flaw affects iOS, iPadOS, macOS, tvOS and visionOS. Processing a maliciously crafted file may lead to heap corruption.
An out-of-bounds write in Apple systems was addressed with improved bounds checking. The flaw affects iOS, iPadOS, macOS and visionOS. Processing a maliciously crafted 3D model may lead to memory corruption.
A race condition was addressed with improved state handling. It affects iOS, iPadOS, macOS, tvOS and watchOS. An app may be able to cause unexpected system termination or corrupt kernel memory.
A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory.
An out-of-bounds write in Apple systems was addressed with improved input validation. The flaw affects iOS, iPadOS and macOS. Processing a maliciously crafted file may lead to heap corruption.
The issue was addressed with improved memory handling. It affects iOS, iPadOS, macOS, tvOS, visionOS and watchOS. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
A path handling issue was addressed with improved validation. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.
An integer overflow was addressed with improved input validation. The issue affects iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.
A logic issue was addressed with improved state management. The vulnerability affects macOS Golden Gate, macOS Sequoia, and macOS Tahoe. An unprivileged attacker may be able to execute arbitrary code as root.
A logic issue was addressed with improved checks. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to gain root privileges.
A logic issue in macOS was addressed with improved checks. An app may be able to gain root privileges.
An authentication issue was addressed with improved validation of user attributes. An app may be able to gain root privileges.
An authentication issue was addressed with improved state management. The vulnerability affects macOS Golden Gate. A remote attacker may be able to cause arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS