CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Remote code execution vulnerability in Microsoft Word. Opening a specially crafted document could allow an attacker to execute code.
Spoofing vulnerability in Microsoft SharePoint Server. Allows an attacker to impersonate another user or service.
Remote code execution vulnerability in Windows Media MPEG-4 Video Decoder. Could allow an attacker to execute code in the context of the current user.
Vulnerability in Windows Print Spooler allows remote code execution. An attacker could exploit it to run arbitrary code on the vulnerable system.
Information disclosure vulnerability in the ONCRPC XDR driver of Windows Services for NFS. Could lead to data exposure.
Information disclosure vulnerability in the ONCRPC XDR driver of Windows Services for NFS. Could lead to data exposure.
Vulnerability in Windows Digital TV Tuner device registration application allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Information disclosure vulnerability in the ONCRPC XDR driver of Windows Services for NFS. Could lead to data exposure.
Elevation of privilege vulnerability in Windows Bluetooth Driver. An attacker could exploit it to gain elevated privileges.
Elevation of privilege vulnerability in the Windows Storage Spaces Controller. It allows a local attacker to gain elevated privileges.
Remote code execution vulnerability in Remote Desktop Client. An attacker could exploit this to execute code remotely on the client machine.
Remote code execution vulnerability in Windows Graphics Component during font parsing. An attacker could exploit it to execute code.
Remote code execution vulnerability in the Windows Graphics Component. An attacker could exploit this flaw to execute arbitrary code in the context of the logged-on user.
Remote code execution vulnerability in Microsoft Dynamics 365 On-Premises. An attacker could exploit this flaw to execute code remotely.
Windows Event Tracing Elevation of Privilege Vulnerability.
An elevation of privilege vulnerability in Windows Event Tracing.
An elevation of privilege vulnerability in the Windows User Profile Service.
Vulnerability in Windows Print Spooler allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
Microsoft Office Remote Code Execution Vulnerability. Details not available in the description.
Elevation of privilege vulnerability in Microsoft Defender. An attacker could exploit it to gain elevated privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

