CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Use-after-free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
Use-after-free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
Use-after-free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
Missing authentication for a critical function in the Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
An out-of-bounds read in the Windows Imaging Component allows an authorized attacker to disclose information locally.
An out-of-bounds read in the Remote Desktop Client allows an authorized attacker to disclose information over a network.
A buffer over-read in the Windows Overlay Filter allows an authorized attacker to disclose information locally.
A vulnerability in the Windows License Manager allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

