CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-72982
CriticalEPSS 60%

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code remotely over a network.

CVE-2026-72981
HighEPSS 51%

Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

CVE-2026-72980
Medium

An uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVE-2026-72979
CriticalEPSS 60%

Use-after-free vulnerability in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.

CVE-2026-72978
MediumEPSS 61%

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

CVE-2026-72977
MediumEPSS 60%

An out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

CVE-2026-72976
Medium

An out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.

CVE-2026-72975
MediumEPSS 51%

An out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

CVE-2026-72974
MediumEPSS 59%

A buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-72973
HighEPSS 55%

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-72972
HighEPSS 55%

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-72967
High

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-72966
Medium

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.

CVE-2026-72965
High

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72964
Medium

Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.

CVE-2026-72963
High

Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.

CVE-2026-72962
High

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-72961
High

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-72960
HighEPSS 53%

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

CVE-2026-72959
HighEPSS 58%

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Vulnerability data from NVD (NIST) · CISA KEV · EPSS