CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-69335
High

Use-after-free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69334
HighEPSS 55%

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-69333
High

Use-after-free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69332
HighEPSS 54%

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69331
High

Use-after-free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-69329
HighEPSS 67%

Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.

CVE-2026-69328
High

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69325
HighEPSS 52%

Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.

CVE-2026-69324
High

Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

CVE-2026-69323
High

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69322
HighEPSS 54%

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

CVE-2026-69321
Medium

Missing authentication for a critical function in the Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.

CVE-2026-69319
High

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69318
Medium

An out-of-bounds read in the Windows Imaging Component allows an authorized attacker to disclose information locally.

CVE-2026-69317
MediumEPSS 58%

An out-of-bounds read in the Remote Desktop Client allows an authorized attacker to disclose information over a network.

CVE-2026-69316
Medium

A buffer over-read in the Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69315
Medium

A vulnerability in the Windows License Manager allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.

CVE-2026-69314
High

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.

CVE-2026-69313
High

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69312
High

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS