CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-42986
HighEPSS 79%

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-42985
HighEPSS 59%

A use-after-free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-42984
High

Use after free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-42983
High

Use after free vulnerability in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-42981
High

An integer underflow vulnerability in Windows Performance Monitor allows an unauthorized attacker to execute code remotely over a network.

CVE-2026-42980
HighEPSS 93%

Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-42979
High

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-42978
High

A race condition in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-42977
High

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-42974
High

An integer overflow vulnerability in Windows Performance Monitor allows an unauthorized attacker to execute code remotely over a network.

CVE-2026-42916
High

Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-42913
High

Race condition vulnerability in Remote Desktop Client. An unauthorized attacker can execute code remotely by exploiting concurrent access to a shared resource.

CVE-2026-42912
High

A race condition in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-42911
High

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-42910
High

Out-of-bounds write vulnerability in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally.

CVE-2026-42909
High

Remote Desktop Client has a race condition vulnerability in concurrent execution using a shared resource. An unauthorized attacker can execute code remotely.

CVE-2026-42908
HighEPSS 55%

Windows RDP contains an out-of-bounds read vulnerability that allows an unauthorized attacker to disclose information over a network.

CVE-2026-42905
HighEPSS 79%

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-42902
High

Improper authorization vulnerability in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.

CVE-2026-42837
High

Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS