CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.16)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-83774
Medium

Exposure of sensitive system information to an unauthorized control sphere in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-83773
Medium

Exposure of sensitive system information to an unauthorized control sphere in the Windows MIDI Service Module allows an authorized attacker to disclose information locally.

CVE-2026-83771
High

A use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-83770
CriticalEPSS 62%

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-83769
High

A use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-83768
High

A heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83767
High

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83766
Medium

Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.

CVE-2026-83765
Medium

An out-of-bounds read in the Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2026-83764
Medium

Incorrect authorization in the Windows Clipboard User Service allows an authorized attacker to disclose information locally.

CVE-2026-83763
High

Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.

CVE-2026-83762
High

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83761
High

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-83760
Medium

An out-of-bounds read in the Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.

CVE-2026-83759
HighEPSS 53%

Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.

CVE-2026-83758
High

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.

CVE-2026-83757
High

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83756
High

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-83755
Medium

Use of an uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-83754
High

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS