CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-68880
HighEPSS 56%

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVE-2026-68878
HighEPSS 54%

Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-68877
High

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.

CVE-2026-68876
HighEPSS 54%

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.

CVE-2026-68875
High

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-68874
MediumEPSS 58%

A vulnerability in Windows Program Compatibility Assistant Service causes an out-of-bounds read, allowing an authorized attacker to disclose information over a network.

CVE-2026-68873
Medium

A vulnerability in the Windows Program Compatibility Assistant Service allows sensitive information to be written to a log file. An authorized attacker could exploit this to disclose information locally.

CVE-2026-68852
Medium

A vulnerability in Microsoft Account involves the use of an uninitialized resource. An authorized attacker could exploit this to disclose information locally.

CVE-2026-68851
Medium

A vulnerability in Windows NTFS involves a buffer over-read. An authorized attacker could exploit this to disclose information locally.

CVE-2026-68850
High

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.

CVE-2026-68849
Medium

A vulnerability in the Windows Bluetooth Port Driver involves an out-of-bounds read. An authorized attacker could exploit this to disclose information locally.

CVE-2026-68848
High

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-68847
High

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

CVE-2026-68846
High

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

CVE-2026-68845
High

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-68844
High

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.

CVE-2026-68843
Medium

A vulnerability in Microsoft Office Word involves a use-after-free condition. An authorized attacker could exploit this to disclose information locally.

CVE-2026-68842
Medium

A vulnerability in the Windows MIDI Service Module involves exposure of sensitive system information to an unauthorized control sphere. An authorized attacker could exploit this to disclose information locally.

CVE-2026-68841
High

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-68840
High

A race condition exists in the Windows USB Driver due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS