CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
XSS vulnerability in Microsoft Dynamics 365 (on-premises) allows injection of malicious script into victim's browser. Attacker can steal data or hijack session.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.
XSS vulnerability in Microsoft Dynamics 365 (on-premises) allows injection of malicious script. Attacker can execute script in victim's context.
Denial of Service vulnerability in .NET. An attacker could cause a crash of applications using .NET.
Vulnerability in Microsoft Office OneNote allows remote code execution. An attacker could exploit this flaw to run malicious code on the victim's machine.
A vulnerability in Microsoft Dynamics Business Central/NAV allows information disclosure. An attacker could exploit this flaw to access sensitive data.
A vulnerability in Microsoft Word allows remote code execution. An attacker could exploit this flaw to run malicious code on the victim's machine.
Remote code execution vulnerability in Microsoft Outlook. Allows an attacker to execute code remotely in the context of the user.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.
Remote code execution vulnerability in Windows OLE. An attacker could exploit it to execute code on the target system.
Elevation of privilege vulnerability in the Windows kernel. Allows a local attacker to gain elevated privileges.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit it to execute code on the server.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit the flaw to execute code.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.
A vulnerability in Microsoft WDAC OLE DB provider for SQL Server allows remote code execution. An attacker could exploit this flaw to run malicious code on the server.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. Allows an attacker to execute code in the context of the application using this provider.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit it to execute code on the target system.
Remote Code Execution vulnerability in Microsoft Message Queuing (MSMQ). Allows a remote attacker to execute arbitrary code.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. Allows an attacker to execute code in the context of the service or application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

