CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.16)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-70014
HighEPSS 51%

Use after free in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network.

CVE-2026-70013
High

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70012
High

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-70011
Medium

Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.

CVE-2026-70010
High

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-70008
High

An integer overflow or wraparound exists in the Windows IP Over USB Service. An authorized attacker can exploit this vulnerability to elevate privileges locally.

CVE-2026-70007
High

An out-of-bounds write exists in .NET Framework. An unauthorized attacker can exploit this vulnerability to execute code over a network.

CVE-2026-70006
High

A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.

CVE-2026-70005
Medium

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-70004
High

A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.

CVE-2026-69999
Medium

Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.

CVE-2026-69998
High

A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.

CVE-2026-69997
High

A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.

CVE-2026-69996
High

A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.

CVE-2026-69995
High

A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.

CVE-2026-69994
High

A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.

CVE-2026-69992
High

A use after free exists in Windows Remote Desktop Services. An unauthorized attacker can exploit this vulnerability to execute code over a network.

CVE-2026-69991
High

A use after free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69988
High

A use after free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69987
High

A use after free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS