CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-54115
High

Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally.

CVE-2026-50692
High

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-50689
High

Use-after-free vulnerability in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

CVE-2026-50688
HighEPSS 75%

A Use-After-Free vulnerability in the Windows kernel allows an authorized attacker to elevate privileges locally. The issue stems from improper memory management in the kernel, potentially leading to arbitrary code execution in kernel context.

CVE-2026-50687
High

Use-after-free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50686
High

Windows OLE has a type confusion vulnerability that allows an unauthorized attacker to execute code remotely.

CVE-2026-50685
High

A double free vulnerability in Windows DHCP Server allows an authorized attacker to execute code remotely over the network.

CVE-2026-50683
High

A heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-50682
HighEPSS 56%

An out-of-bounds read vulnerability in Windows Active Directory. It allows an authorized attacker to deny service over a network.

CVE-2026-50680
High

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-50679
High

A heap-based buffer overflow vulnerability in the Microsoft Windows Search component allows an authorized attacker to elevate privileges locally.

CVE-2026-50677
High

Use-after-free vulnerability in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-50676
High

Race condition vulnerability in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-50674
High

A use-after-free vulnerability in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-50673
High

A null pointer dereference vulnerability in the Windows kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50672
High

Use-after-free vulnerability in Windows NTFS. An authorized attacker can elevate privileges locally.

CVE-2026-50670
High

An out-of-bounds read vulnerability in the Windows kernel allows an authorized attacker to elevate privileges locally. This flaw can be exploited to gain higher-level access on the affected system.

CVE-2026-50669
High

Race condition vulnerability in Windows Telephony Service. An authorized attacker can elevate privileges locally.

CVE-2026-50667
HighEPSS 80%

A race condition in Windows NTFS due to improper synchronization of shared resources allows an authenticated attacker to elevate privileges locally.

CVE-2026-50666
High

Windows Remote Access Connection Manager has a use-after-free vulnerability that allows an authorized attacker to elevate privileges over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS