CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Elevation of privilege vulnerability in Windows Virtual Registry Provider.
Elevation of Privilege vulnerability in Windows Win32k. Details are not provided in the description.
Elevation of privilege vulnerability in Windows Installer. An attacker could exploit it to gain elevated privileges on the system.
Remote code execution vulnerability in the Windows Graphics Component. An attacker could exploit it to run arbitrary code on the affected system.
Vulnerability in the App-V Overlay Filter in Windows allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Information disclosure vulnerability in Microsoft Power BI. Allows an attacker to access sensitive data.
A memory corruption vulnerability in Internet Explorer that could allow remote code execution.
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run code on the affected system.
Remote code execution vulnerability in Microsoft Office. An attacker could exploit it to run arbitrary code on the affected system.
DirectX Elevation of Privilege Vulnerability
Elevation of privilege vulnerability in Windows Error Reporting. Allows a local attacker to gain elevated privileges.
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run arbitrary code in the context of the logged-in user.
Elevation of privilege vulnerability in Windows Update Stack Setup. An attacker could exploit it to gain elevated privileges on the system.
An elevation of privilege vulnerability exists in Windows Print Spooler. Technical details are not provided in the description, but the vulnerability could allow an attacker to gain elevated privileges on the system.
An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensitive information when the server is running as a reverse proxy via a specially crafted request.
A data race vulnerability exists in audio in Google Chrome prior to 89.0.4389.72. A remote attacker could potentially exploit heap corruption via a crafted HTML page.
Maxum Rumpus 8.2.13 and 8.2.14 are affected by a command injection vulnerability. The user management functionality in the web administration panel contains a parameter that, due to insufficient validation, allows execution of arbitrary system commands.
A CSRF vulnerability in Maxum Rumpus 8.2.13 and 8.2.14 allows an attacker to perform unintended actions in the web application if an authenticated user visits a malicious page.
Podatność dotyczy wszystkich wersji pakietu github.com/nats-io/nats-server/server. Nieufne konta mogą spowodować awarię serwera, używając konfiguracji, które reprezentują cykle eksportu/importu usług.
In the Linux kernel through 5.11.3, iSCSI data structures lack proper length constraints, allowing an unprivileged user to send a Netlink message up to the maximum length.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS