CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An elevation of privilege vulnerability in DirectX due to improper handling of objects in memory. An attacker could run arbitrary code in kernel mode, then install programs, view, change or delete data, or create new accounts with full user rights.
An elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could exploit it to run arbitrary code in an elevated context.
An elevation of privilege vulnerability in Storage Service due to improper handling of file operations. An attacker could gain elevated privileges on the victim system.
An elevation of privilege vulnerability in Windows Push Notification Service due to improper handling of objects in memory. An attacker could run processes in an elevated context, install programs, and view, change or delete data.
Memory corruption vulnerability in Windows Media Foundation due to improper handling of objects in memory. An attacker could install programs, view/change/delete data, or create new accounts with full user rights.
Elevation of privilege vulnerability in the Windows Graphics Component. An attacker can run a specially crafted application to run processes in an elevated context.
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
An elevation of privilege vulnerability in Windows Error Reporting manager due to improper handling of file and folder links. An attacker could overwrite a targeted file leading to elevated status.
Memory corruption vulnerability in Windows Media Foundation when improperly handling objects in memory. An attacker could exploit this vulnerability to install programs, view, change, or delete data, or create new accounts with full user rights.
An elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could exploit it to run arbitrary code in an elevated context.
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
An elevation of privilege vulnerability in Clipboard Service due to improper handling of calls. An attacker could run arbitrary code in the security context of the local system, install programs, view, change or delete data, or create new accounts with full user rights.
Denial of service vulnerability in Windows TLS implementation due to improper handling of certain key exchanges. A remote unauthenticated attacker could send a specially crafted request to a system using TLS 1.2 or lower, triggering an automatic reboot.
Remote code execution vulnerability in the Color Management Module (ICM32.dll) when handling objects in memory. An attacker could take control of the system, install programs, view/change/delete data, or create new accounts with full user rights.
An elevation of privilege vulnerability in the Windows kernel due to improper handling of objects in memory. An attacker could run arbitrary code in kernel mode, install programs, view, change or delete data, or create new accounts with full user rights.
Elevation of privilege vulnerability in the Windows BITS IIS module that improperly handles uploaded content. An attacker with BITS upload permissions could upload restricted file types to an IIS-hosted folder.
An elevation of privilege vulnerability in Clipboard Service due to improper handling of calls. An attacker could run arbitrary code in the security context of the local system, install programs, view, change or delete data, or create new accounts with full user rights.
An elevation of privilege vulnerability in Windows Update Stack due to improper handling of objects in memory. An attacker could run arbitrary code in kernel mode, install programs, view, change or delete data, or create new accounts with full user rights.
Elevation of privilege vulnerability in Windows Update Stack. An attacker who logs on can run a specially crafted application to execute code in kernel mode, allowing installation of programs, data modification, or creation of accounts with full user rights.
Denial of service vulnerability in .NET Core and .NET Framework due to improper handling of web requests. A remote unauthenticated attacker could cause a denial of service by sending specially crafted requests to the application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS