CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint due to improper input neutralization during web page generation. Allows an authorized attacker to perform spoofing over a network.
An untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The issue stems from improper memory handling during document processing.
A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. The issue involves improper security context management.
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. The issue stems from improper access permission verification.
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. The issue stems from improper memory management during data processing.
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. The issue stems from improper memory management during data processing.
A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. The issue stems from improper memory access.
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally. The issue stems from improper memory management.
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Improper link resolution before file access (link following) in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. The issue stems from improper file path handling.
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. The issue stems from improper memory access.
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
An out-of-bounds read vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

