CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.21)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-83740
High

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-83739
High

Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-83738
High

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-83735
High

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83732
High

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83728
High

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.

CVE-2026-83727
High

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-83726
High

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-83725
High

Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

CVE-2026-83724
High

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-83722
High

A use after free vulnerability in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

CVE-2026-83721
High

A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83720
High

A use after free vulnerability in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-83718
High

A use after free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83717
High

A use after free vulnerability in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83716
High

A heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-83715
High

Missing authentication for a critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.

CVE-2026-83712
High

An out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-83710
High

A use after free vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83709
High

A heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS