CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The issue was fixed with improved memory handling. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may cause unexpected system termination.
The issue was fixed with improved memory handling. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may cause unexpected system termination.
An authorization issue was fixed with improved state management. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An attacker with physical access to a locked device may view sensitive user information.
Improved handling of symlinks in macOS. An app may be able to modify protected parts of the file system.
A permissions issue addressed by removing the vulnerable code affects macOS Sequoia, macOS Sonoma, and macOS Tahoe. An app may be able to read files outside of its sandbox.
An authorization issue was addressed with improved state management. An app may access sensitive user data.
An authorization issue was addressed with improved state management. An app may access sensitive user data.
A logic issue was addressed with improved validation. An app may access user-sensitive data.
This issue was addressed with improved redaction of sensitive information. An app may be able to leak sensitive kernel state.
An out-of-bounds read was addressed with improved bounds checking. An attacker with physical access to a locked device may view sensitive user information.
An out-of-bounds write issue was addressed with improved bounds checking. Processing an audio stream in a maliciously crafted media file may terminate the process.
An out-of-bounds write issue in Apple systems may cause unexpected system termination by an app. This affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.
A memory handling issue addressed with improved memory handling affects iOS, iPadOS, macOS Golden Gate, macOS Sequoia, and macOS Sonoma. Processing a maliciously crafted asset catalog may result in disclosure of process memory.
The issue was addressed with improved input sanitization. A malicious app may be able to access protected user data.
A local attacker may be able to determine the legacy VNC password configured for Screen Sharing. This issue was addressed with additional entitlement checks.
An app may be able to cause a denial of service. A logic issue existed resulting in memory corruption, addressed with improved state management.
A file quarantine bypass was addressed with additional checks. A maliciously crafted ZIP archive may bypass Gatekeeper checks. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.5.
The issue was addressed with improved checks. A maliciously crafted ZIP archive may bypass Gatekeeper checks. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.5.
An information disclosure issue was addressed with improved privacy controls. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.3. An app may be able to access sensitive user data.
A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5). Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through firmware analysis. Successful exploitation could result in unauthorized access to privileged functions on affected devices.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS