CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The issue was addressed with additional entitlement checks. The fix is included in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to leak sensitive user information.
A privacy issue was addressed by removing sensitive data. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to leak sensitive user information.
The issue was addressed with improved memory handling. It affects Apple systems and may allow an app to disclose kernel memory.
A file quarantine bypass was addressed with additional checks. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may bypass Gatekeeper checks.
A permissions issue was addressed with improved validation. This issue affects iOS, iPadOS, macOS, and visionOS and may allow an app to delete files for which it does not have permission.
A memory initialization issue was fixed with improved memory handling. The vulnerability affects macOS systems. An app may disclose kernel memory.
A type confusion issue was addressed with improved checks. Processing a maliciously crafted image may lead to a denial-of-service.
Astro versions 1.0.0 through 4.0.18 have a vulnerability where source.title and enclosure.type fields in the RSS generator are not XML-escaped. An attacker controlling these values can inject arbitrary XML into the RSS feed, leading to fake metadata, malicious redirects, or misparsing by feed readers. In SSR mode, the poisoned feed is served to all subscribers. Fixed in version 4.0.19.
An access issue, fixed with improved access restrictions. An app may be able to read files outside of its sandbox.
Additional sandbox restrictions were introduced in macOS Tahoe. An app may be able to access sensitive user data.
Bounds checking was improved to fix an out-of-bounds read. An app may be able to cause unexpected system termination.
Bounds checking was improved to fix an out-of-bounds write. An app may be able to cause unexpected system termination.
A race condition was addressed with improved checks. This issue affects iOS and iPadOS and may allow an app to modify protected parts of the file system.
A denial of service issue in macOS Tahoe. Fixed by removing vulnerable code. A local attacker may cause a denial of service.
An issue in Safari and other Apple systems. Fixed by improving state management. Visiting a website may lead to an app denial-of-service.
This issue was addressed with improved checks. An app may be able to access sensitive user data.
An information disclosure issue was addressed by removing the vulnerable code. An app may be able to access sensitive user data.
This issue was addressed with improved checks. An app may be able to access information about a user's contacts.
This issue was addressed with improved data protection. An app may be able to read a persistent device identifier.
Improved authorization state management in Safari and macOS Tahoe. An app may access sensitive user data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS