CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.16)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-83872
High

Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83871
High

Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-83870
Medium

An out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.

CVE-2026-83869
Critical

Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-83868
High

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83867
High

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-83866
High

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83865
Medium

Relative path traversal in Windows (wininet.dll) allows an authorized attacker to perform tampering locally.

CVE-2026-83864
Medium

Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-83863
High

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-83862
Critical

Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.

CVE-2026-83861
High

Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

CVE-2026-83860
HighEPSS 66%

Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.

CVE-2026-83859
High

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83857
High

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-83856
High

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVE-2026-83855
HighEPSS 68%

Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.

CVE-2026-83854
Medium

Improper access control in Windows Notification allows an authorized attacker to disclose information locally.

CVE-2026-83853
High

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-83852
High

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS