CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
A stack-based buffer overflow vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
A heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
Visual Studio Code is affected by a path traversal vulnerability due to improper limitation of a pathname to a restricted directory. This allows an unauthorized attacker to execute code over a network.
Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.
Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS