CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-69268
HighEPSS 53%

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69267
Medium

A vulnerability in Windows Connected User Experiences and Telemetry is due to insufficient granularity of access control, allowing an authorized attacker to disclose information locally.

CVE-2026-69266
HighEPSS 55%

Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-69265
High

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-68898
MediumEPSS 58%

A vulnerability in Windows iSCSI causes an out-of-bounds read, allowing an unauthorized attacker to deny service over a network.

CVE-2026-68897
High

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVE-2026-68896
High

Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-68895
Medium

A vulnerability in Internet Storage Name Service is due to a numeric truncation error, allowing an authorized attacker to disclose information locally.

CVE-2026-68894
HighEPSS 54%

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

CVE-2026-68893
High

Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.

CVE-2026-68892
High

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVE-2026-68891
Medium

A vulnerability in Microsoft Standard XPS causes an out-of-bounds read, allowing an authorized attacker to disclose information locally.

CVE-2026-68890
High

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVE-2026-68889
High

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

CVE-2026-68888
High

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVE-2026-68887
HighEPSS 66%

Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.

CVE-2026-68886
Medium

A vulnerability in Windows Network Connection Broker involves a use-after-free condition, allowing an authorized attacker to disclose information locally.

CVE-2026-68885
High

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVE-2026-68884
High

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-68881
Medium

A vulnerability in Microsoft Standard XPS causes an out-of-bounds read, allowing an authorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS