CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
An untrusted search path vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
An improper link resolution before file access vulnerability in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
A heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
An untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
A race condition vulnerability in Windows SMB Server allows an authorized attacker to elevate privileges over a network. The issue stems from improper synchronization when accessing shared resources concurrently.
A vulnerability in the Windows Telephony Service allows an authorized attacker to elevate privileges through external control of file name or path over an adjacent network.
Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
A race condition vulnerability in Windows SMB Server allows an authorized attacker to elevate privileges over a network. The issue stems from improper synchronization when accessing shared resources concurrently.
A use-after-free vulnerability in Windows Management Services allows an authorized attacker to elevate privileges locally.
A use-after-free vulnerability in Windows Management Services allows an authorized attacker to elevate privileges locally.