CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS). Allows an unauthenticated attacker to execute arbitrary code remotely in the context of the RRAS service.
A vulnerability in Windows Routing and Remote Access Service (RRAS) allows remote code execution. An unauthenticated attacker could exploit this flaw to take control of the affected system.
A vulnerability in Windows Storage allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
A vulnerability in the Win32k driver allows elevation of privilege in Windows. This flaw can be exploited by a local attacker to gain higher privileges.
A vulnerability in Microsoft Streaming Service allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
A vulnerability in Microsoft Streaming Service allows elevation of privilege. The flaw can be exploited by a local attacker to gain higher privileges on the system.
A vulnerability in the Windows kernel allows elevation of privilege. This flaw can be exploited by a local attacker to gain higher privileges on the system.
A vulnerability in the Win32k driver allows elevation of privilege in Windows. This flaw can be exploited by a local attacker to gain higher privileges.
A vulnerability in the Windows Win32 kernel subsystem allows elevation of privilege. This flaw can be exploited by a local attacker to gain higher privileges on the system.
A vulnerability in the Windows Cloud Files Mini Filter Driver allows elevation of privilege. The flaw stems from improper input validation, potentially enabling an attacker to execute code in kernel context.
A vulnerability in the Windows kernel-mode driver allows elevation of privilege. An attacker who successfully exploits it can gain SYSTEM privileges.
A vulnerability in the Windows Standards-Based Storage Management Service allows a Denial of Service (DoS) attack. An attacker can exploit this flaw to disrupt the service, leading to denial of access to storage management.
A vulnerability in the Win32k driver allows elevation of privilege in Windows. This flaw can be exploited by a local attacker to gain higher privileges.
A vulnerability in the Windows Wi-Fi driver allows remote code execution. An attacker can exploit this flaw by sending specially crafted network packets to a device with Wi-Fi enabled.
A remote code execution vulnerability in the Windows OLE component allows an attacker to execute arbitrary code in the context of the logged-on user. Exploitation requires user interaction, such as opening a specially crafted file.
A vulnerability in the Windows Link Layer Topology Discovery (LLTD) protocol allows remote code execution. An attacker can send a specially crafted network packet to a vulnerable system, potentially leading to full device compromise.
A vulnerability in the Windows Link Layer Topology Discovery (LLTD) protocol allows remote code execution. An attacker can send a specially crafted packet to a vulnerable system, leading to full control over the device.
A remote code execution vulnerability exists in Microsoft Event Trace Log file parsing. An attacker can exploit a specially crafted ETW file to take control of the affected system.
A vulnerability in the Windows DHCP Server service allows a Denial of Service (DoS) attack. An attacker can send specially crafted DHCP packets, causing the service to crash and preventing IP address assignment to clients.
A vulnerability in the Windows kernel allows elevation of privilege. An attacker who successfully exploits it can gain SYSTEM privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS