CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Improper link resolution before file access in Windows Server Backup allows an authorized attacker to elevate privileges locally.
A race condition vulnerability in the Microsoft Windows App Store allows an authorized attacker to escalate privileges locally. Improper synchronization during concurrent resource access can be exploited to elevate privileges.
Use after free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.
Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.
Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network.
Missing authentication for a critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
An improper access control vulnerability exists in Windows Win32K. This allows an authorized attacker to elevate privileges locally.
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
A stack-based buffer overflow in the Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
Improper access control vulnerability in Windows Server. Allows an authorized attacker to elevate privileges locally.
Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally.
An improper access control vulnerability exists in Windows Win32K. This allows an authorized attacker to elevate privileges locally.
A use-after-free vulnerability exists in the Graphics Kernel. This allows an authorized attacker to elevate privileges locally.
A use-after-free vulnerability in the Windows Internal Task Bar allows an authorized attacker to elevate privileges locally.
A race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
A race condition in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
The Windows Win32K component has an improper access control vulnerability that allows an authorized attacker to elevate privileges locally.
A race condition in the Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
A race condition in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS