CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An elevation of privilege vulnerability in Windows Storage Spaces Controller allows an attacker to gain higher privileges.
Remote code execution vulnerability in the Windows DNS Snap-in. An attacker could exploit this flaw to execute code in the context of the current user.
Remote code execution vulnerability in the Windows DNS Snap-in. An attacker could exploit this flaw to execute code in the context of the current user.
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit this flaw to execute arbitrary code in the context of the service.
Elevation of privilege vulnerability in the Windows Projected File System. It allows a local attacker to gain elevated privileges.
A vulnerability in Windows Media allows remote code execution (RCE).
Remote code execution vulnerability in Power BI. Allows an attacker to execute code in the context of the service.
Elevation of privilege vulnerability in Windows Kernel. Could be exploited to gain administrative privileges.
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to execute code on the victim's system.
Remote code execution vulnerability in Microsoft Exchange Server. Allows an attacker to execute code remotely on the server.
A remote code execution vulnerability in Microsoft Exchange Server.
Denial of service vulnerability in Windows TCP/IP driver. An attacker could cause a system crash.
Podatność CVE-2021-33012 dotyczy wszystkich wersji kontrolera MicroLogix 1100 firmy Rockwell Automation. Umożliwia zdalnemu, nieautoryzowanemu atakującemu wysyłanie specjalnie przygotowanych poleceń, co prowadzi do awarii PLC w trybie RUN, skutkując warunkami odmowy usługi.
A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability in the Autodesk Design Review application. A malicious actor may leverage this vulnerability to cause memory corruption and execute arbitrary code in the context of the current process.
A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information.
The vulnerability in WinWaste.NET version 1.0.6183.16475 is due to incorrect permissions, allowing a local unprivileged user to replace the executable with a malicious file that will be executed with 'LocalSystem' privileges.
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.
A remote code execution vulnerability exists in the Windows Print Spooler service due to improper privileged file operations. An attacker can exploit it to run arbitrary code with SYSTEM privileges, allowing them to install programs, modify data, or create accounts with full user rights. Microsoft has released security updates, but additional registry and Group Policy settings must be verified.
Use-after-free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Tesseract OCR version 5.0.0-alpha-20201231 contains a use-after-free vulnerability in the one_ell_conflict function during a strpbrk call. The flaw may lead to improper access to freed memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS