CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.16)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-69986
High

A use after free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69985
HighEPSS 51%

A heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-69984
High

A use after free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69982
Medium

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-69979
Medium

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-69978
Medium

Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.

CVE-2026-69977
High

A use after free vulnerability in the Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

CVE-2026-69976
High

A use after free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69974
Medium

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.

CVE-2026-69973
MediumEPSS 53%

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

CVE-2026-69971
Medium

Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-69970
High

A heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69969
Medium

Improper link resolution before file access (link following) in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

CVE-2026-69968
MediumEPSS 55%

Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

CVE-2026-69967
Medium

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69966
High

An integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69964
High

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. Exploitation requires local access to the system.

CVE-2026-69963
High

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.

CVE-2026-69959
High

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. Exploitation requires local access to the system.

CVE-2026-69958
Medium

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS