CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Remote code execution vulnerability in Windows Jet Database Engine due to improper handling of objects in memory. An attacker could execute arbitrary code on a victim's system if the victim opens a specially crafted file.
Remote code execution vulnerability in Windows Jet Database Engine due to improper handling of objects in memory. An attacker could execute arbitrary code on a victim's system if the victim opens a specially crafted file.
A remote code execution vulnerability in Windows Jet Database Engine due to improper handling of objects in memory. An attacker could exploit it by enticing a victim to open a specially crafted file. The update corrects the way objects are handled in memory.
Remote code execution vulnerability in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker could run arbitrary code in the context of the current user.
Elevation of privilege vulnerability in Windows Clipboard Service. An attacker who logs on can run a specially crafted application to execute arbitrary code in the security context of the local system, allowing installation of programs, data modification, or creation of accounts with full user rights.
Elevation of privilege vulnerability in Windows Clipboard Service. An attacker who logs on can run a specially crafted application to execute arbitrary code in the security context of the local system, allowing installation of programs, data modification, or creation of accounts with full user rights.
Elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context by running a specially crafted application.
Denial of service vulnerability in ASP.NET Core when improperly handling web requests. A remote unauthenticated attacker could send specially crafted requests, causing the application to become unavailable.
Elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context by running a specially crafted application.
Elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context by running a specially crafted application.
Elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context by running a specially crafted application.
Elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context by running a specially crafted application.
Elevation of privilege vulnerability in the Windows Common Log File System (CLFS) driver. An attacker who logs on can run a specially crafted application to run processes in an elevated context.
Remote code execution vulnerability in Microsoft Graphics Components when handling objects in memory. An attacker could execute arbitrary code on a target system if a user opens a specially crafted file.
Elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context by running a specially crafted application.
Memory corruption vulnerability in Windows Media Foundation due to improper handling of objects in memory. An attacker could install programs, view/change/delete data, or create new accounts with full user rights.
An elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could exploit it to run arbitrary code in an elevated context.
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
Elevation of privilege vulnerability in Windows kernel-mode driver. An attacker logged on to the system can run a specially crafted application to execute arbitrary code in kernel mode, potentially installing programs, modifying data, or creating accounts with full user rights.
Elevation of privilege vulnerability in the Windows Graphics Device Interface (GDI). An attacker who logs on can run a specially crafted application to execute arbitrary code in kernel mode, allowing installation of programs, data modification, or creation of accounts with full user rights.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS