CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.16)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-97817
MediumEPSS 61%

Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. Overwriting heap memory may lead to data leakage.

CVE-2026-97816
CriticalEPSS 59%

OpenSSH for Windows is affected by a use after free vulnerability. This allows an unauthorized attacker to execute code over a network.

CVE-2026-97815
CriticalEPSS 52%

Windows Error Reporting is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.

CVE-2026-97814
CriticalEPSS 62%

Windows Text Shaping is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.

CVE-2026-97813
MediumEPSS 61%

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. Overwriting heap memory may lead to data leakage.

CVE-2026-97812
High

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97811
High

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-97810
High

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97809
High

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97808
High

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97807
High

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97806
High

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97805
CriticalEPSS 61%

Windows Partition Management Driver is affected by an out-of-bounds read vulnerability. This allows an unauthorized attacker to execute code over a network.

CVE-2026-97804
High

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

CVE-2026-97803
High

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-97801
High

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

CVE-2026-97800
High

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

CVE-2026-97799
High

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97798
HighEPSS 57%

Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-97794
High

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS