CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.21)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-69970
High

A heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69966
High

An integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69964
High

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. Exploitation requires local access to the system.

CVE-2026-69963
High

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.

CVE-2026-69959
High

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. Exploitation requires local access to the system.

CVE-2026-69957
High

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.

CVE-2026-69953
High

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. Exploitation requires local access to the system.

CVE-2026-69952
High

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.

CVE-2026-69950
High

Buffer over-read vulnerability in Windows Overlay Filter. An authorized attacker can exploit this flaw to elevate privileges locally.

CVE-2026-69949
High

Heap-based buffer overflow in Windows Client for NFS. An authorized attacker can exploit this flaw to elevate privileges locally.

CVE-2026-69945
High

Missing authorization in Windows AppX Deployment Extensions. An authorized attacker can exploit this flaw to elevate privileges locally.

CVE-2026-69943
HighEPSS 62%

Improper limitation of a pathname to a restricted directory (path traversal) in Microsoft Office SharePoint. An authorized attacker can execute code over a network.

CVE-2026-69942
High

Buffer over-read vulnerability in Windows Overlay Filter. An authorized attacker can exploit this flaw to execute code locally.

CVE-2026-69935
High

Use after free vulnerability in Windows Storage. An authorized attacker can exploit this flaw to elevate privileges locally.

CVE-2026-69934
High

Integer overflow or wraparound in Windows Spaceport.sys. An authorized attacker can exploit this flaw to elevate privileges locally.

CVE-2026-69931
High

Race condition due to concurrent execution using a shared resource with improper synchronization in Windows Storage. An authorized attacker can exploit this flaw to elevate privileges locally.

CVE-2026-69926
High

Type confusion (access of resource using incompatible type) in Desktop Window Manager. An authorized attacker can exploit this flaw to elevate privileges locally.

CVE-2026-69923
High

Uncontrolled search path element in Windows AI. An authorized attacker can exploit this flaw to elevate privileges locally.

CVE-2026-69918
High

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-69916
High

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS