CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A use after free in the Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
A use after free in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
An out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
An incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
A type confusion in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
A use after free in the Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free vulnerability in Windows Kerberos. An authorized attacker can exploit it to elevate privileges locally.
Heap-based buffer overflow in the Windows Storage Spaces Controller driver. An authorized attacker can exploit it to elevate privileges locally.
Use after free vulnerability in the Windows Ancillary Function Driver for WinSock. An authorized attacker can elevate privileges locally.
Use after free vulnerability in the Windows Win32 Kernel Subsystem. An authorized attacker can exploit it to elevate privileges locally.
Heap-based buffer overflow in the Windows Common Log File System Driver. An authorized attacker can elevate privileges locally.
Use after free vulnerability in the Windows Audio Service. An authorized attacker can exploit it to elevate privileges locally.
Incorrect authorization in Active Directory Domain Services. An unauthorized attacker can execute code over a network.
Out-of-bounds read in the Desktop Window Manager component. An authorized attacker can elevate privileges locally.
Type confusion (access of resource using incompatible type) in the Windows Ancillary Function Driver for WinSock. An authorized attacker can elevate privileges locally.
Use after free vulnerability in the Windows Console Driver. An authorized attacker can exploit it to elevate privileges locally.
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS