CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.16)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-69970
High

A heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69969
Medium

Improper link resolution before file access (link following) in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

CVE-2026-69968
MediumEPSS 55%

Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

CVE-2026-69967
Medium

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69966
High

An integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69964
High

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. Exploitation requires local access to the system.

CVE-2026-69963
High

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.

CVE-2026-69959
High

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. Exploitation requires local access to the system.

CVE-2026-69958
Medium

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-69957
High

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.

CVE-2026-69955
MediumEPSS 59%

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

CVE-2026-69954
Medium

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69953
High

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. Exploitation requires local access to the system.

CVE-2026-69952
High

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.

CVE-2026-69950
High

Buffer over-read vulnerability in Windows Overlay Filter. An authorized attacker can exploit this flaw to elevate privileges locally.

CVE-2026-69949
High

Heap-based buffer overflow in Windows Client for NFS. An authorized attacker can exploit this flaw to elevate privileges locally.

CVE-2026-69947
Medium

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-69945
High

Missing authorization in Windows AppX Deployment Extensions. An authorized attacker can exploit this flaw to elevate privileges locally.

CVE-2026-69943
HighEPSS 56%

Improper limitation of a pathname to a restricted directory (path traversal) in Microsoft Office SharePoint. An authorized attacker can execute code over a network.

CVE-2026-69942
High

Buffer over-read vulnerability in Windows Overlay Filter. An authorized attacker can exploit this flaw to execute code locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS