CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.01)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2023-21800
HighEPSS 62%

Elevation of privilege vulnerability in Windows Installer. Allows an attacker to gain elevated privileges on the system.

CVE-2023-21799
HighEPSS 65%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit it to run arbitrary code in the context of the application.

CVE-2023-21798
HighEPSS 65%

Remote code execution vulnerability in Microsoft ODBC Driver. An attacker could exploit it to execute arbitrary code on the system.

CVE-2023-21797
HighEPSS 65%

Remote code execution vulnerability in Microsoft ODBC Driver. Could allow an attacker to execute code on the system.

CVE-2023-21777
High

Elevation of privilege vulnerability in Azure App Service on Azure Stack Hub. Could be exploited to gain elevated privileges in the cloud environment.

CVE-2023-21718
HighEPSS 52%

Remote code execution vulnerability in Microsoft ODBC Driver for SQL Server. An attacker could exploit it to run arbitrary code on the system.

CVE-2023-21717
HighEPSS 63%

Elevation of privilege vulnerability in Microsoft SharePoint Server. Allows an attacker to gain higher privileges in the SharePoint environment.

CVE-2023-21715
HighActively exploitedEPSS 96%

Microsoft Publisher Security Feature Bypass Vulnerability. Details are not provided in the description, but it allows an attacker to bypass security features.

CVE-2023-21713
HighEPSS 76%

Microsoft SQL Server Remote Code Execution Vulnerability. An attacker could exploit this vulnerability to execute code remotely on the SQL server.

CVE-2023-21707
HighEPSS 100%

Remote code execution vulnerability in Microsoft Exchange Server. Allows an attacker to execute arbitrary code in the context of the Exchange server.

CVE-2023-21706
HighEPSS 90%

Remote code execution vulnerability in Microsoft Exchange Server. An attacker could exploit it to run arbitrary code on the server.

CVE-2023-21705
HighEPSS 63%

Remote code execution vulnerability in Microsoft SQL Server. An attacker could exploit it to execute arbitrary code on the server.

CVE-2023-21704
High

Remote code execution vulnerability in Microsoft ODBC Driver for SQL Server. Could allow arbitrary code execution.

CVE-2023-21702
HighEPSS 75%

Denial of Service vulnerability in Windows iSCSI Service. An attacker could cause the service to crash, leading to unavailability of resources.

CVE-2023-21701
HighEPSS 75%

Denial of Service vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could cause the service to crash, leading to unavailability of authentication.

CVE-2023-21700
HighEPSS 75%

Denial of Service vulnerability in Windows iSCSI Discovery Service. An attacker could cause the service to crash, leading to unavailability of iSCSI discovery functionality.

CVE-2023-21695
HighEPSS 62%

Remote code execution vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). Allows an attacker to execute code remotely.

CVE-2023-21691
HighEPSS 71%

Information Disclosure vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could exploit this vulnerability to gain access to sensitive information.

CVE-2023-21688
HighEPSS 89%

Elevation of privilege vulnerability in the NT OS Kernel. Allows a local attacker to gain elevated privileges on the system.

CVE-2023-21686
HighEPSS 64%

Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. Could allow an attacker to execute code.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS