CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit it to execute code on the server or in the application.
Remote code execution vulnerability in Windows Pragmatic General Multicast (PGM). An attacker could exploit this flaw to execute code remotely on the system.
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability.
Elevation of privilege vulnerability in Microsoft Message Queuing (MSMQ). An attacker could exploit it to gain elevated privileges.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.
A security feature bypass vulnerability in Windows SmartScreen.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code on the system.
Remote code execution vulnerability in Microsoft ActiveX Data Objects. An attacker could exploit this flaw to execute arbitrary code in the user's context.
Denial of Service vulnerability in Internet Connection Sharing (ICS). An attacker could exploit this flaw to cause a service crash.
Remote code execution vulnerability in Microsoft ODBC Driver. An attacker could exploit this flaw to execute code remotely.
Elevation of privilege vulnerability in the Win32k driver. It could allow an attacker to gain administrator privileges.
Elevation of privilege vulnerability in the Windows kernel, allowing an attacker to gain higher privileges on the system.
Vulnerability in Azure Connected Machine Agent allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
Spoofing vulnerability in Dynamics 365 Sales. An attacker could impersonate another user or system, potentially leading to unauthorized access or data manipulation.
Cross-Site Scripting (XSS) vulnerability in Microsoft Dynamics 365 Customer Engagement. Allows an attacker to inject malicious script into the victim's browser.
Elevation of privilege vulnerability in Microsoft Defender for Endpoint Protection. An attacker could exploit it to gain elevated privileges.
A vulnerability in Microsoft Office allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious documents or files that the user opens.
Remote code execution vulnerability in Azure DevOps Server. An attacker could exploit this flaw to execute code remotely.
Podatność CVE-2024-23512 dotyczy deserializacji niezaufanych danych w produkcie ProductX – WooCommerce Builder oraz blokach Gutenberg WooCommerce. Problem ten występuje w wersjach od n/a do 3.1.4.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

