CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Windows Internal System User Profile has a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference vulnerability in Windows Domain Controller. An unauthorized attacker can cause a denial of service over the network.
The Windows kernel has an improper access control vulnerability that allows an authorized attacker to elevate privileges locally.
An out-of-bounds read vulnerability in the Windows NTFS file system allows an authorized attacker to elevate privileges locally. This flaw can be exploited to gain higher-level access on the affected system.
The Windows Connected User Experiences and Telemetry component contains a type confusion vulnerability that allows an authorized attacker to elevate privileges locally.
A heap-based buffer overflow vulnerability in the Windows NTFS file system allows a local authenticated attacker to execute code in kernel context.
A race condition vulnerability in Windows Media allows an authorized attacker to elevate privileges over the network.
Use-after-free vulnerability in Windows Runtime allows an authorized attacker to elevate privileges locally.
A stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
A stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
A heap-based buffer overflow in the Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
A use-after-free vulnerability in the Windows Backup Engine allows an authorized attacker to elevate privileges locally.
Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.
A race condition in Windows Media allows an authorized attacker to elevate privileges locally.
A race condition in Windows Runtime allows an authorized attacker to elevate privileges locally.
Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
Windows Media has a race condition vulnerability due to concurrent execution using a shared resource, allowing an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS