CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
A use-after-free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Use after free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free vulnerability in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
An integer underflow vulnerability in Windows Performance Monitor allows an unauthorized attacker to execute code remotely over a network.
Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
A race condition in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
An integer overflow vulnerability in Windows Performance Monitor allows an unauthorized attacker to execute code remotely over a network.
Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
Race condition vulnerability in Remote Desktop Client. An unauthorized attacker can execute code remotely by exploiting concurrent access to a shared resource.
A race condition in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Out-of-bounds write vulnerability in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally.
Remote Desktop Client has a race condition vulnerability in concurrent execution using a shared resource. An unauthorized attacker can execute code remotely.
Windows RDP contains an out-of-bounds read vulnerability that allows an unauthorized attacker to disclose information over a network.
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Improper authorization vulnerability in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

