CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.16)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-78509
CriticalEPSS 60%

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVE-2026-78445
CriticalEPSS 60%

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-77493
CriticalEPSS 60%

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73025
CriticalEPSS 58%

Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-73010
CriticalEPSS 58%

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

CVE-2026-73009
CriticalEPSS 60%

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

CVE-2026-72983
CriticalEPSS 60%

Use-after-free vulnerability in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code remotely over a network.

CVE-2026-72982
CriticalEPSS 60%

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code remotely over a network.

CVE-2026-72979
CriticalEPSS 60%

Use-after-free vulnerability in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.

CVE-2026-70296
CriticalEPSS 60%

Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code remotely over a network.

CVE-2026-69910
CriticalEPSS 61%

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code remotely over a network.

CVE-2026-69854
Critical

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-69845
CriticalEPSS 62%

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.

CVE-2026-69829
CriticalEPSS 60%

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code remotely over a network.

CVE-2026-69824
CriticalEPSS 60%

Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code remotely over a network.

CVE-2026-69819
CriticalEPSS 60%

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code remotely over a network.

CVE-2026-69769
CriticalEPSS 60%

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.

CVE-2026-69768
CriticalEPSS 60%

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.

CVE-2026-69730
CriticalEPSS 60%

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

CVE-2026-69715
CriticalEPSS 60%

Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS