CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in the Windows Print Spooler service allows elevation of privilege.
CVE-2021-40444 is a remote code execution vulnerability in the MSHTML engine of Internet Explorer, exploited via specially crafted Microsoft Office documents. An attacker creates a malicious ActiveX control, and the victim must open the document, leading to code execution.
A vulnerability in the Windows Print Spooler allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
A vulnerability in the Windows Print Spooler allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
Remote code execution vulnerability in Microsoft Office Graphics. An attacker could exploit this flaw to execute code on the victim's system.
Vulnerability in Microsoft Office Graphics allows remote code execution. An attacker could exploit it to run arbitrary code on the victim's system.
Remote code execution vulnerability in Microsoft Office Graphics. An attacker could exploit it to run arbitrary code in the context of the logged-in user.
Vulnerability in Microsoft Word allows remote code execution. An attacker could exploit it to run arbitrary code on the victim's system.
Vulnerability in Microsoft Excel allows remote code execution. An attacker could exploit it to run arbitrary code on the victim's system.
Remote code execution vulnerability in Microsoft Office Visio. It could allow an attacker to execute code on the victim's system.
Remote code execution vulnerability in Microsoft Office Visio. Similar to other Visio flaws, it could allow an attacker to run code.
Spoofing vulnerability in Microsoft SharePoint Server. An attacker could impersonate a trusted source, potentially leading to fraud or unauthorized actions.
Spoofing vulnerability in Microsoft SharePoint Server. An attacker could impersonate a trusted source, potentially leading to fraud or unauthorized actions.
Spoofing vulnerability in Microsoft Office. Could allow an attacker to impersonate trusted sources.
Elevation of privilege vulnerability in Open Management Infrastructure. Could be exploited to gain elevated privileges.
An elevation of privilege vulnerability in Open Management Infrastructure (OMI).
Remote code execution vulnerability in Microsoft Office Access Connectivity Engine. An attacker could exploit it to run malicious code on the victim's system.
Elevation of privilege vulnerability in Open Management Infrastructure. Could be exploited to gain elevated privileges.
Remote code execution vulnerability in Microsoft MPEG-2 Video Extension. An attacker could exploit it to execute arbitrary code on the victim's system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS