CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An authorization issue was addressed with improved state management. This issue affects iOS and iPadOS and may allow an app to access sensitive user data.
An out-of-bounds write vulnerability in Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) fixed with improved bounds checking. Processing a maliciously crafted file may lead to a denial-of-service.
An information leakage vulnerability in Apple systems, fixed with additional validation. An app may be able to disclose kernel memory.
An authorization issue, fixed with improved state management. An app may be able to access sensitive user data.
A vulnerability in Apple systems, fixed by using HTTPS when sending information over the network. An app may be able to access sensitive user data.
A permissions issue in Apple systems. Additional restrictions were added. An app may be able to read a persistent device identifier.
An inconsistent user interface issue, fixed with improved state management. A remote attacker may be able to bypass network filters.
A vulnerability in Apple systems, fixed with improved checks. Processing a maliciously crafted contact may leak sensitive data.
This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7. An attacker with physical access may be able to access sensitive user data during iPhone Mirroring.
UI was improved. The issue affects Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Visiting a website that frames malicious content may lead to UI spoofing.
Permissions validation was improved. The issue affects Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy.
A vulnerability in Apple systems, fixed with improved memory handling. An attacker on the local network may be able to cause a denial-of-service.
A logic issue was addressed with improved checks. This issue affects iOS, iPadOS, and macOS and may allow an app to access sensitive user data.
A buffer overflow vulnerability in Apple systems, fixed with improved memory handling. Processing a 3D model may lead to disclosure of process memory.
A vulnerability in Apple systems, fixed through improved state management. An app may be able to access sensitive user data.
A use-after-free issue in the web content processing component was addressed with improved memory management. The flaw affects Safari, iOS, iPadOS, macOS Golden Gate, macOS Tahoe, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to an unexpected Safari crash.
The issue was addressed with additional entitlement checks. The fix is included in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to leak sensitive user information.
A privacy issue was addressed by removing sensitive data. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to leak sensitive user information.
The issue was addressed with improved memory handling. It affects Apple systems and may allow an app to disclose kernel memory.
A file quarantine bypass was addressed with additional checks. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may bypass Gatekeeper checks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS