CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.16)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-83916
High

Double free in Windows Error Reporting allows an authorized attacker to execute code locally.

CVE-2026-83915
High

Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83914
HighEPSS 53%

Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.

CVE-2026-83913
High

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83912
High

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-83911
High

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-83910
CriticalEPSS 61%

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-83909
Medium

Exposure of sensitive system information to an unauthorized control sphere in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-83908
High

Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-83907
Medium

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.

CVE-2026-83906
MediumEPSS 59%

Incorrect implementation of an authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-83905
Medium

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

CVE-2026-83904
Medium

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

CVE-2026-83903
High

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-83902
High

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-83901
High

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-83900
High

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83899
High

Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83898
Medium

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

CVE-2026-83897
Medium

A vulnerability in the Windows Win32 Kernel Subsystem allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS