CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
Use-after-free vulnerability in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code remotely over a network.
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code remotely over a network.
Use-after-free vulnerability in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code remotely over a network.
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code remotely over a network.
Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code remotely over a network.
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code remotely over a network.
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code remotely over a network.
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

