CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Microsoft SQL OLE DB allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
A vulnerability in Microsoft Dynamics 365 Business Central allows unauthorized users to elevate their privileges. Exploiting this flaw may lead to access to resources that the user should not have access to.
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
A vulnerability in Microsoft Message Queuing (MSMQ) allows attackers to remotely trigger an error, leading to denial of service.
A vulnerability in the Windows Cloud Files Mini Filter Driver allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges on the system.
A vulnerability in the Windows System Assessment Tool allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges on the system.
A vulnerability in the Windows Common Log File System Driver allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges in the system.
A vulnerability in the Windows User Interface Application Core on tablets allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
A vulnerability in Visual Studio Tools for Office Runtime allows for spoofing, potentially leading to unauthorized access to user systems.
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
A vulnerability in Microsoft Outlook allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw by sending a specially crafted email.
A vulnerability in Microsoft SharePoint Server allows for spoofing, which may lead to unauthorized access to user data. An attacker can exploit this flaw to impersonate a trusted source.
A vulnerability in Microsoft SharePoint Server allows for spoofing, potentially leading to unauthorized access to user data. An attacker could exploit this flaw to impersonate a trusted source.
A vulnerability in the Microsoft WDAC OLE DB provider for SQL Server allows for remote code execution. An attacker can exploit this flaw to execute arbitrary code on a remote SQL server.
CVE-2023-36876 is a vulnerability in the Reliability Analysis Metrics Calculation (RacTask) that can lead to elevation of privilege in the system. An attacker could exploit this flaw to gain higher privileges than intended.
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access.
The installer for Zoom Desktop Client for Windows before version 5.14.5 has an untrusted search path that may allow an authenticated user to escalate privileges via local access.
Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS