CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Elevation of privilege vulnerability in the Windows Remote Access Connection Manager. It allows a local attacker to gain elevated privileges.
A vulnerability in the Windows DNS Server allows remote code execution (RCE).
Remote code execution vulnerability in Microsoft Windows Media Foundation. Could allow an attacker to execute code via a specially crafted media file.
Remote code execution vulnerability in Microsoft Windows Media Foundation. An attacker could exploit this vulnerability to execute code in the context of the logged-on user.
Remote code execution vulnerability in Windows Font Driver Host. An attacker could exploit it to execute code in the system context.
A vulnerability in the software cryptography module of Cisco ASA and FTD Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the device, resulting in a denial of service (DoS) condition. This is due to a logic error in handling specific decryption errors. An attacker could exploit this by sending malicious packets over an established IPsec connection, causing a crash and reload. Important: Successful exploitation would not compromise encrypted data. This affects only ASA 9.16.1 and FTD 7.0.0.
Remote code execution vulnerability in Visual Studio Code. An attacker could exploit this flaw to execute arbitrary code in the user's context.
A vulnerability in Visual Studio Code allows remote code execution (RCE).
Remote code execution vulnerability in Windows DNS Server. An attacker could send specially crafted DNS queries to execute code on the server.
A vulnerability in Microsoft Defender allows remote code execution (RCE).
Remote code execution vulnerability in Raw Image Extension. An attacker could exploit this flaw to execute arbitrary code on the victim's system.
Remote code execution vulnerability in Microsoft SharePoint Server. An attacker could remotely execute code on the server.
Remote code execution vulnerability in Microsoft Excel. An attacker could exploit this flaw to execute code on the victim's system.
Elevation of privilege vulnerability in Win32k. A local attacker could exploit it to gain higher privileges on the system.
Elevation of privilege vulnerability in Windows Kernel. Could be exploited to gain elevated privileges.
Vulnerability in Windows Storage Spaces Controller allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
Vulnerability in Windows Storage Spaces Controller allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
A vulnerability in the Windows Installer allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Vulnerability in Windows Storage Spaces Controller allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Remote code execution vulnerability in the Windows kernel. An attacker could exploit it to gain elevated privileges and execute code in kernel mode.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

