CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-69592
High

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69591
MediumEPSS 58%

An out-of-bounds read vulnerability in Windows NTFS allows an authorized attacker to disclose information over a network.

CVE-2026-69590
CriticalEPSS 60%

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

CVE-2026-69589
High

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69588
HighEPSS 67%

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

CVE-2026-69587
HighEPSS 67%

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

CVE-2026-69586
CriticalEPSS 61%

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.

CVE-2026-69585
High

Incorrect type conversion or cast in the Windows Search component allows an authorized attacker to elevate privileges locally.

CVE-2026-69584
High

Integer overflow or wraparound in the Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69583
High

Heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69582
High

Buffer over-read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69581
High

Use after free in the Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69580
High

Heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69579
CriticalEPSS 60%

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

CVE-2026-69578
High

Numeric truncation error in the Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-69576
High

Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.

CVE-2026-69575
High

Use after free in the Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-69574
High

Use after free in the Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69573
High

Use after free in the Windows UDFS file system driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69572
MediumEPSS 58%

An out-of-bounds read vulnerability in Windows SMB Client allows an authorized attacker to disclose information over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS