CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-2016-10290 describes an elevation of privilege vulnerability in the Qualcomm shared memory driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-10289 is a privilege escalation vulnerability in the Qualcomm crypto driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-10288 is a privilege escalation vulnerability in the Qualcomm LED driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2016-10287 is a privilege escalation vulnerability in the Qualcomm sound driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-10286 describes an elevation of privilege vulnerability in the Qualcomm video driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-10285 is a privilege escalation vulnerability in the Qualcomm video driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2016-10284 is a privilege escalation vulnerability in the Qualcomm video driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
A vulnerability in the Qualcomm Wi-Fi driver allows a local malicious application to execute arbitrary code within the context of the kernel. It requires first compromising a privileged process.
CVE-2016-10282 describes an elevation of privilege vulnerability in the MediaTek thermal driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
A vulnerability in the MediaTek thermal driver allows a local malicious application to execute arbitrary code within the kernel context. It requires first compromising a privileged process.
CVE-2016-10280 is a privilege escalation vulnerability in the MediaTek thermal driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
A vulnerability in the Motorola bootloader allows a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise.
A vulnerability in the Qualcomm bootloader allows a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise.
A vulnerability in the Qualcomm bootloader allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2016-10274 is a vulnerability in the MediaTek touchscreen driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
A vulnerability in Microsoft Office and related products allows remote code execution when the software fails to properly handle objects in memory. This affects multiple versions of Office and SharePoint.
The Microsoft Server Message Block 1.0 (SMBv1) server on various Windows systems allows an attacker to execute remote code by improperly handling certain requests.
The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it handles certain requests.
The vulnerability in Microsoft Server Message Block 1.0 (SMBv1) allows an attacker to execute remote code by improperly handling certain requests. This affects multiple versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, Windows 10, and Windows Server 2016.
The Microsoft Server Message Block 1.0 (SMBv1) server on various Windows systems allows an attacker to execute remote code by improperly handling certain requests.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS