CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.01)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2023-35364
High

A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized system access.

CVE-2023-35363
High

A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized system access.

CVE-2023-35362
High

A vulnerability in the Windows Clip service allows for privilege escalation, potentially leading to unauthorized access to the system.

CVE-2023-35361
High

A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.

CVE-2023-35360
High

A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.

CVE-2023-35358
HighEPSS 53%

A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.

CVE-2023-35357
HighEPSS 53%

A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.

CVE-2023-35356
HighEPSS 63%

A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.

CVE-2023-35353
High

The vulnerability in Connected User Experiences and Telemetry allows for privilege escalation, potentially enabling attackers to gain higher privileges in the system.

CVE-2023-35352
HighEPSS 65%

A vulnerability in Windows Remote Desktop allows for a security feature bypass, potentially leading to unauthorized access to the system.

CVE-2023-35350
HighEPSS 60%

A vulnerability in Windows Active Directory Certificate Services (AD CS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.

CVE-2023-35347
High

A vulnerability in the Microsoft Install Service allows for privilege escalation. An attacker can exploit this flaw to gain elevated privileges on the system.

CVE-2023-35343
High

A vulnerability in the Windows Geolocation Service allows for remote code execution. An attacker can exploit this flaw to gain control over the system.

CVE-2023-35342
High

A vulnerability in Windows Image Acquisition allows for elevation of privilege, potentially leading to unauthorized access to the system.

CVE-2023-35340
High

A vulnerability in the Windows CNG Key Isolation Service allows for privilege escalation. An attacker can exploit this flaw to gain elevated privileges on the system.

CVE-2023-35339
HighEPSS 74%

A vulnerability in Windows CryptoAPI allows for a Denial of Service (DoS) attack, potentially leading to service unavailability. An attacker can exploit this flaw to disrupt system operations.

CVE-2023-35338
HighEPSS 75%

A vulnerability in the Windows Peer Name Resolution Protocol can lead to denial of service. Attackers can exploit this flaw to disrupt service availability.

CVE-2023-35337
High

A vulnerability in Win32k allows for elevation of privileges, potentially leading to unauthorized access to the system.

CVE-2023-35335
High

A vulnerability in Microsoft Dynamics 365 (on-premises) allows attackers to perform Cross-site Scripting (XSS) attacks. Exploiting this flaw may lead to the execution of malicious code in the user's browser context.

CVE-2023-35333
HighEPSS 60%

A vulnerability in the PandocUpload extension for MediaWiki allows for remote code execution. An attacker can exploit this flaw to execute arbitrary code on the server, potentially leading to severe consequences.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS