CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
A remote code execution vulnerability exists in Microsoft Office due to improper parsing of specially crafted email messages.
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
A vulnerability in Microsoft Edge on Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to improper access to objects in memory.
The vulnerability in Microsoft Edge on Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to improper access to objects in memory.
A vulnerability in Microsoft Windows 10 and Windows Server 2016 allows a locally-authenticated attacker to run a specially crafted application on a targeted system. The issue occurs when Windows Secure Kernel Mode fails to properly handle objects in memory.
A vulnerability in Microsoft Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 allows an attacker to run processes in an elevated context due to improper handling of objects in memory by the Windows kernel.
The vulnerability in Windows Cursor allows improper elevation of privilege in various versions of Windows, including Windows 8.1, Windows Server 2012, and Windows 10. This could lead to unauthorized access to the system.
A vulnerability in Microsoft Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 allows an attacker to run processes in an elevated context due to improper handling of objects in memory by the Windows kernel.
Windows Shell w systemach Microsoft Windows, w tym Windows Server 2008 SP2, Windows 7 SP1, Windows 8, Windows 10 oraz innych, pozwala lokalnym użytkownikom lub zdalnym atakującym na wykonanie dowolnego kodu poprzez spreparowany plik .LNK. Problem występuje podczas wyświetlania ikon w Eksploratorze Windows lub innych aplikacjach przetwarzających ikony skrótów.
A vulnerability in Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allows information disclosure when a user opens a specially crafted PDF file.
A DCOM object in Helppane.exe in Microsoft Windows allows an authenticated attacker to run arbitrary code in another user's session when configured to run as the interactive user.
A vulnerability in Windows systems allows an attacker to elevate privileges due to tdx.sys failing to check the length of a buffer before copying memory to it.
A vulnerability in Microsoft Windows allows an attacker to execute remote code when the system fails to properly handle cabinet files. This affects multiple versions of Windows, including Windows 7, 8.1, 10, and Windows Server.
A vulnerability in Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file.
The vulnerability in Windows PDF allows remote code execution when a user opens a specially crafted PDF file. It affects Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016.
Uniscribe in various versions of Windows and Microsoft applications allows remote code execution due to improper handling of objects in memory.
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS