CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Zidentyfikowano podatność w urządzeniach RUGGEDCOM RM1224, SCALANCE M-800, SCALANCE S615 oraz innych, która dotyczy przepełnienia bufora na stosie w obsłudze ramek STP BPDU. Może to umożliwić zdalnemu atakującemu wywołanie stanu odmowy usługi lub potencjalnie zdalne wykonanie kodu.
W urządzeniach PowerLogic ION8650, ION8800, ION7650, ION7700/73xx oraz ION83xx/84xx/85xx/8600 występuje podatność CWE-119: Niewłaściwe ograniczenie operacji w granicach bufora pamięci, która może spowodować restart licznika.
Internet Explorer Remote Code Execution Vulnerability. Details are not provided in the description, but it allows remote code execution.
Remote code execution vulnerability in Visual Studio Code Java Extension Pack. Allows an attacker to execute code in the context of the user who opens a malicious Java project.
Remote code execution vulnerability in Remote Development extension for Visual Studio Code. Allows an attacker to execute code in the context of the user who opens a malicious project.
Remote code execution vulnerability in Quantum Development Kit for Visual Studio Code. An attacker could exploit this vulnerability to execute code remotely in the user's context.
Remote code execution vulnerability in the ESLint extension for Visual Studio Code. An attacker could exploit it to run arbitrary code in the user's context.
Elevation of Privilege vulnerability in Windows Win32k. An attacker could exploit this vulnerability to gain elevated privileges on the system.
Remote Code Execution vulnerability in Microsoft SharePoint Server. Details are not provided in the description.
Elevation of privilege vulnerability in Windows 10 Update Assistant. Allows an attacker to gain elevated privileges on the system.
Denial of service vulnerability in Windows DNS Server. An attacker could exploit this vulnerability to cause the DNS service to become unavailable.
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run code on the affected system.
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run arbitrary code in the context of the logged-in user.
Remote code execution vulnerability in Visual Studio Code. Allows an attacker to execute arbitrary code on the victim's system.
Microsoft Office Remote Code Execution Vulnerability. Details are not provided in the description, but it allows remote code execution.
Remote code execution vulnerability in Microsoft Office ClickToRun. An attacker could exploit this to execute code in the context of the logged-in user.
Remote code execution vulnerability in Microsoft Office. An attacker could exploit it to run malicious code on the victim's machine.
Remote code execution vulnerability in Microsoft PowerPoint. An attacker could exploit it to run malicious code on the victim's machine.
Microsoft Visio Security Feature Bypass Vulnerability. It allows an attacker to bypass security mechanisms in Visio.
Remote code execution vulnerability in Microsoft Excel. An attacker could exploit it to run malicious code on the victim's machine.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS