CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.30)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2021-34445
High

Elevation of privilege vulnerability in the Windows Remote Access Connection Manager. It allows a local attacker to gain elevated privileges.

CVE-2021-34442
HighEPSS 86%

A vulnerability in the Windows DNS Server allows remote code execution (RCE).

CVE-2021-34441
HighEPSS 79%

Remote code execution vulnerability in Microsoft Windows Media Foundation. Could allow an attacker to execute code via a specially crafted media file.

CVE-2021-34439
HighEPSS 83%

Remote code execution vulnerability in Microsoft Windows Media Foundation. An attacker could exploit this vulnerability to execute code in the context of the logged-on user.

CVE-2021-34438
HighEPSS 79%

Remote code execution vulnerability in Windows Font Driver Host. An attacker could exploit it to execute code in the system context.

CVE-2021-1422
HighEPSS 65%

A vulnerability in the software cryptography module of Cisco ASA and FTD Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the device, resulting in a denial of service (DoS) condition. This is due to a logic error in handling specific decryption errors. An attacker could exploit this by sending malicious packets over an established IPsec connection, causing a crash and reload. Important: Successful exploitation would not compromise encrypted data. This affects only ASA 9.16.1 and FTD 7.0.0.

CVE-2021-34529
HighEPSS 89%

Remote code execution vulnerability in Visual Studio Code. An attacker could exploit this flaw to execute arbitrary code in the user's context.

CVE-2021-34528
HighEPSS 86%

A vulnerability in Visual Studio Code allows remote code execution (RCE).

CVE-2021-34525
HighEPSS 80%

Remote code execution vulnerability in Windows DNS Server. An attacker could send specially crafted DNS queries to execute code on the server.

CVE-2021-34522
HighEPSS 84%

A vulnerability in Microsoft Defender allows remote code execution (RCE).

CVE-2021-34521
HighEPSS 81%

Remote code execution vulnerability in Raw Image Extension. An attacker could exploit this flaw to execute arbitrary code on the victim's system.

CVE-2021-34520
HighEPSS 87%

Remote code execution vulnerability in Microsoft SharePoint Server. An attacker could remotely execute code on the server.

CVE-2021-34518
HighEPSS 80%

Remote code execution vulnerability in Microsoft Excel. An attacker could exploit this flaw to execute code on the victim's system.

CVE-2021-34516
HighEPSS 68%

Elevation of privilege vulnerability in Win32k. A local attacker could exploit it to gain higher privileges on the system.

CVE-2021-34514
High

Elevation of privilege vulnerability in Windows Kernel. Could be exploited to gain elevated privileges.

CVE-2021-34513
HighEPSS 59%

Vulnerability in Windows Storage Spaces Controller allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.

CVE-2021-34512
HighEPSS 59%

Vulnerability in Windows Storage Spaces Controller allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.

CVE-2021-34511
High

A vulnerability in the Windows Installer allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.

CVE-2021-34510
HighEPSS 55%

Vulnerability in Windows Storage Spaces Controller allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.

CVE-2021-34508
HighEPSS 80%

Remote code execution vulnerability in the Windows kernel. An attacker could exploit it to gain elevated privileges and execute code in kernel mode.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS