CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.30)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2022-41079
HighEPSS 52%

Spoofing vulnerability in Microsoft Exchange Server. Allows an attacker to impersonate another user or sender.

CVE-2022-41078
HighEPSS 52%

A spoofing vulnerability in Microsoft Exchange Server allows an attacker to impersonate another entity in communication.

CVE-2022-41073
HighActively exploitedEPSS 82%

Elevation of privilege vulnerability in Windows Print Spooler. An attacker could exploit it to gain elevated privileges.

CVE-2022-41063
HighEPSS 53%

A vulnerability in Microsoft Excel allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw to run malicious software on the infected device.

CVE-2022-41062
HighEPSS 72%

Remote code execution vulnerability in Microsoft SharePoint Server. Allows an attacker to execute code on the server.

CVE-2022-41061
HighEPSS 64%

A vulnerability in Microsoft Word allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious Word documents.

CVE-2022-41058
HighEPSS 78%

Denial of Service vulnerability in Windows Network Address Translation (NAT). An attacker could exploit this vulnerability to cause the NAT service to crash.

CVE-2022-41057
HighEPSS 61%

Vulnerability in Windows HTTP.sys allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.

CVE-2022-41056
HighEPSS 78%

Denial of Service vulnerability in the RADIUS protocol in Windows Network Policy Server (NPS). An attacker could exploit this vulnerability to cause the service to crash.

CVE-2022-41054
High

A vulnerability in the Windows Resilient File System (ReFS) allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.

CVE-2022-41053
HighEPSS 78%

Denial of Service vulnerability in Windows Kerberos. An attacker could exploit this vulnerability to cause the Kerberos service to crash.

CVE-2022-41052
HighEPSS 53%

Remote Code Execution vulnerability in Windows Graphics Component. Allows an attacker to execute code in the context of the current user.

CVE-2022-41051
HighEPSS 52%

A remote code execution vulnerability in Azure RTOS GUIX Studio allows an attacker to execute arbitrary code.

CVE-2022-41050
High

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability.

CVE-2022-41048
HighEPSS 71%

Remote code execution vulnerability in Microsoft ODBC Driver. An attacker could exploit this flaw to execute code remotely.

CVE-2022-41047
HighEPSS 71%

Remote code execution vulnerability in Microsoft ODBC Driver. It allows an attacker to execute code remotely on the system.

CVE-2022-41045
High

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.

CVE-2022-41044
HighEPSS 59%

Vulnerability in Windows Point-to-Point Tunneling Protocol allows remote code execution. An attacker could exploit it to run arbitrary code on a remote system.

CVE-2022-41039
HighEPSS 60%

Vulnerability in Windows Point-to-Point Tunneling Protocol allows remote code execution. An attacker could exploit it to run arbitrary code on a remote system.

CVE-2022-38023
HighEPSS 83%

Elevation of privilege vulnerability in Netlogon RPC. It allows an attacker to elevate privileges in a Windows domain.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS