CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.16)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-83696
High

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83695
Medium

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-83694
High

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83693
CriticalEPSS 62%

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83692
High

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83691
High

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-83690
High

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83689
High

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83688
HighEPSS 57%

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-83687
High

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

CVE-2026-83686
Medium

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-83685
MediumEPSS 66%

Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.

CVE-2026-83683
MediumEPSS 66%

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.

CVE-2026-83682
High

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83681
Medium

Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.

CVE-2026-83680
High

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83679
High

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83678
High

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83677
HighEPSS 58%

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.

CVE-2026-83676
High

Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS