CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.08)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A heap-based buffer overflow vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
An exposure of sensitive information vulnerability in Windows Management Services allows an authorized attacker to disclose information locally.
An out-of-bounds read vulnerability in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally.
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network.
Improper access control in the Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.
Generation of error messages containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.
An out-of-bounds read vulnerability in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally.
An absolute path traversal vulnerability in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.
An out-of-bounds read vulnerability in Windows TPM allows an authorized attacker to disclose information locally.
An out-of-bounds read vulnerability in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information via a physical attack.
An exposure of sensitive information in the Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose information locally.
An improper access control vulnerability in Windows Hyper-V allows an authorized attacker to disclose information locally.
A protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally.
An exposure of sensitive information in Windows File Explorer allows an authorized attacker to disclose information locally.
An exposure of sensitive information in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally.
An untrusted pointer dereference vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.
Insecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allow authenticated attackers with low-level privileges to access other users' information via a crafted API request.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS