CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.21)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-70108
High

Heap-based buffer overflow in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70106
High

Heap-based buffer overflow in the Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70104
High

Untrusted pointer dereference in the Windows Win32 Kernel Subsystem. An authorized attacker can elevate privileges locally.

CVE-2026-70103
High

Heap-based buffer overflow in Windows Error Reporting. An authorized attacker can elevate privileges locally.

CVE-2026-70102
High

Use after free in the Windows Spaceport.sys driver. An authorized attacker can elevate privileges locally.

CVE-2026-70095
High

Heap-based buffer overflow in Windows iSCSI. An unauthorized attacker can execute code over a network.

CVE-2026-70093
High

Heap-based buffer overflow in the Windows Rich Text Edit Control. An authorized attacker can elevate privileges locally.

CVE-2026-70092
High

Heap-based buffer overflow in the Microsoft PostScript Printer Driver. An unauthorized attacker can elevate privileges locally.

CVE-2026-70089
HighEPSS 57%

Heap-based buffer overflow in Windows GDI. An unauthorized attacker can execute code over a network.

CVE-2026-70086
High

Use after free in the Microsoft Windows Search Component. An authorized attacker can elevate privileges locally.

CVE-2026-70082
HighEPSS 68%

Uncaught exception in Windows DNS. An unauthorized attacker can deny service over a network.

CVE-2026-70079
HighEPSS 66%

Improper enforcement of behavioral workflow in Windows DNS. An unauthorized attacker can deny service over a network.

CVE-2026-70076
High

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70069
HighEPSS 59%

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

CVE-2026-70068
HighEPSS 57%

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70067
High

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70066
High

Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-70064
High

Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-70062
HighEPSS 52%

Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-70060
High

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS