CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.15)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-85928
Critical

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-85818
Critical

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-85814
CriticalEPSS 60%

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-85809
CriticalEPSS 60%

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine.

CVE-2026-85806
CriticalEPSS 60%

Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

CVE-2026-85792
CriticalEPSS 59%

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine.

CVE-2026-84015
CriticalEPSS 59%

Heap-based buffer overflow in Remote Access PPP EAP-TLS allows an unauthorized attacker to execute code over a network.

CVE-2026-83935
CriticalEPSS 52%

Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.

CVE-2026-83910
CriticalEPSS 61%

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-83869
Critical

Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-83862
Critical

Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.

CVE-2026-83782
CriticalEPSS 59%

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

CVE-2026-83780
CriticalEPSS 61%

Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-83770
CriticalEPSS 62%

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-83748
CriticalEPSS 53%

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83693
CriticalEPSS 62%

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83578
CriticalEPSS 61%

Integer underflow vulnerability in Windows PowerShell allows an unauthorized attacker to execute code over a network.

CVE-2026-83519
CriticalEPSS 61%

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83517
CriticalEPSS 61%

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-75120
Critical

Vulnerability in the OpenText™ (EnCase SAFE Agents) component used by OpenText™ Endpoint Investigator, Endpoint Forensics & Response, Information Assurance, and Endpoint Security allows unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS