CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Uncontrolled resource consumption in Zoom SDKs before version 5.14.7 may allow an unauthenticated user to trigger a denial of service attack via network access.
A vulnerability in .NET and Visual Studio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on a remote system.
A vulnerability in Microsoft Exchange Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
A vulnerability in the Windows Bluetooth A2DP driver allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges on the system.
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
A vulnerability in Microsoft Message Queuing allows for information disclosure, potentially leading to unauthorized access to sensitive data.
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
A vulnerability in the Windows Fax Service allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
The vulnerability in the Reliability Analysis Metrics Calculation Engine (RACEng) allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges within the system.
A vulnerability in the Windows Projected File System allows for elevation of privilege, potentially leading to unauthorized access to the system.
A vulnerability in Microsoft Office Visio allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw to run malicious software on the compromised device.
A vulnerability in Microsoft Office allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious documents or links.
A vulnerability in Microsoft Exchange allows for remote code execution, potentially leading to system takeover. An attacker can exploit this flaw to execute arbitrary code on the Exchange server.
A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.
Remote code execution vulnerability in Microsoft Teams. An attacker could exploit it to execute code on the victim's computer.
Remote code execution vulnerability in Microsoft Teams. An attacker could exploit this flaw to execute code on the victim's system.
A vulnerability in the CAB file extraction function of Bitberry File Opener v23.0 allows attackers to perform a directory traversal.
In version 5.0.0 of ChurchCRM, there is an SQL injection vulnerability that allows a remote attacker to obtain sensitive information via the volopp1 and volopp2 parameters within /QueryView.php.
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp parameter within /QueryView.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

