CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Improved checks in macOS. An app may access sensitive user data.
Improved race condition handling in macOS. An app may access sensitive user data.
An authorization issue was fixed with improved state management. Fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6. An app may access sensitive user data.
An out-of-bounds read was fixed with improved bounds checking. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may access sensitive user data.
A race condition was fixed with additional validation. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and tvOS 26.6. An app may access sensitive user data.
The issue was fixed with improved memory handling. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may cause unexpected system termination.
The issue was fixed with improved memory handling. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may cause unexpected system termination.
An authorization issue was fixed with improved state management. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An attacker with physical access to a locked device may view sensitive user information.
Improved handling of symlinks in macOS. An app may be able to modify protected parts of the file system.
A permissions issue addressed by removing the vulnerable code affects macOS Sequoia, macOS Sonoma, and macOS Tahoe. An app may be able to read files outside of its sandbox.
An authorization issue was addressed with improved state management. An app may access sensitive user data.
An authorization issue was addressed with improved state management. An app may access sensitive user data.
A logic issue was addressed with improved validation. An app may access user-sensitive data.
This issue was addressed with improved redaction of sensitive information. An app may be able to leak sensitive kernel state.
An out-of-bounds read was addressed with improved bounds checking. An attacker with physical access to a locked device may view sensitive user information.
An out-of-bounds write issue was addressed with improved bounds checking. Processing an audio stream in a maliciously crafted media file may terminate the process.
An out-of-bounds write issue in Apple systems may cause unexpected system termination by an app. This affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.
A memory handling issue addressed with improved memory handling affects iOS, iPadOS, macOS Golden Gate, macOS Sequoia, and macOS Sonoma. Processing a maliciously crafted asset catalog may result in disclosure of process memory.
The issue was addressed with improved input sanitization. A malicious app may be able to access protected user data.
A local attacker may be able to determine the legacy VNC password configured for Screen Sharing. This issue was addressed with additional entitlement checks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS