CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.30)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2022-41125
HighActively exploitedEPSS 86%

Elevation of privilege vulnerability in Windows CNG Key Isolation Service. An attacker could exploit it to gain elevated privileges.

CVE-2022-41123
High

Elevation of privilege vulnerability in Microsoft Exchange Server. It allows an attacker to elevate their privileges in the Exchange environment.

CVE-2022-41120
HighEPSS 62%

Vulnerability in Windows System Monitor (Sysmon) allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.

CVE-2022-41119
HighEPSS 52%

A remote code execution vulnerability in Visual Studio allows an attacker to execute arbitrary code in the user's context.

CVE-2022-41118
HighEPSS 61%

Vulnerability in Windows Scripting Languages allows remote code execution. An attacker could exploit it to run arbitrary code on a remote system.

CVE-2022-41114
High

Windows Bind Filter Driver Elevation of Privilege Vulnerability.

CVE-2022-41113
HighEPSS 95%

Vulnerability in the Windows Win32 Kernel Subsystem allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.

CVE-2022-41109
HighEPSS 94%

Vulnerability in Windows Win32k allows elevation of privilege. It could be exploited to gain higher privileges on the system.

CVE-2022-41107
HighEPSS 54%

A vulnerability in Microsoft Office allows remote code execution through the processing of specially crafted graphics. An attacker can exploit this flaw to gain full control over the victim's system.

CVE-2022-41106
HighEPSS 81%

A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.

CVE-2022-41102
High

Windows Overlay Filter Elevation of Privilege Vulnerability.

CVE-2022-41101
High

Windows Overlay Filter Elevation of Privilege Vulnerability.

CVE-2022-41100
High

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.

CVE-2022-41096
High

Elevation of privilege vulnerability in Microsoft DWM Core Library. Could be exploited to gain elevated privileges.

CVE-2022-41095
High

Windows Digital Media Receiver Elevation of Privilege Vulnerability.

CVE-2022-41093
High

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.

CVE-2022-41092
High

Elevation of privilege vulnerability in Windows Win32k. Could be exploited to gain elevated privileges.

CVE-2022-41088
HighEPSS 57%

Vulnerability in Windows Point-to-Point Tunneling Protocol allows remote code execution. An attacker could exploit it to run malicious code on a remote system.

CVE-2022-41085
High

Elevation of privilege vulnerability in Azure CycleCloud. An attacker could exploit it to gain unauthorized privileges.

CVE-2022-41080
HighActively exploitedEPSS 100%

Elevation of privilege vulnerability in Microsoft Exchange Server. Allows an attacker to elevate their privileges in the system.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS