CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A remote code execution vulnerability exists in Microsoft Edge related to how affected Microsoft scripting engines render objects in memory.
Microsoft PowerPoint for Mac 2011 has a remote code execution vulnerability when the software fails to properly handle objects in memory, known as 'Microsoft Office Memory Corruption Vulnerability'.
Microsoft PowerPoint for Mac 2011 has a remote code execution vulnerability when the software fails to properly handle objects in memory, known as 'Microsoft Office Memory Corruption Vulnerability'.
Sterowniki w trybie jądra w systemach Microsoft Windows Server 2008 SP2 i R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold i R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 oraz Windows Server 2016 umożliwiają lokalnym użytkownikom uzyskanie uprawnień za pomocą spreparowanej aplikacji. Jest to znane jako 'Podatność na podniesienie uprawnień Win32k'.
Microsoft Office 2010 SP2, Office 2013 SP1 oraz Office 2016 mają podatność na zdalne wykonanie kodu, gdy oprogramowanie nieprawidłowo obsługuje obiekty w pamięci. Jest to znane jako 'Podatność na zdalne wykonanie kodu w Office'.
Microsoft Office 2010 SP2, Office 2013 SP1 oraz Office 2016 mają podatność na zdalne wykonanie kodu, gdy oprogramowanie nieprawidłowo obsługuje obiekty w pamięci. Jest to znane jako 'Podatność na zdalne wykonanie kodu w Office'.
Microsoft Word and other Office applications have a vulnerability that allows remote code execution when the software fails to properly handle objects in memory. This affects multiple versions of Office, including Word 2007, 2010, 2013, and Office for Mac.
An elevation of privilege vulnerability exists when ASP.NET Core fails to properly sanitize web requests.
The vulnerability in Microsoft .NET Framework allows an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use.
A denial of service vulnerability exists in ASP.NET Core due to improper validation of web requests. Attackers can exploit a flaw in the TextEncoder.EncodeCore function, leading to denial of service.
The Graphics Component in kernel-mode drivers in various versions of Windows allows local users to gain elevated privileges via a crafted application. In Windows 7 on x64-based systems and later, it may also lead to denial of service.
A remote code execution vulnerability exists in Microsoft Edge related to the way affected Microsoft scripting engines render when handling objects in memory, known as 'Microsoft Edge Memory Corruption Vulnerability.'
A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'
A remote code execution vulnerability exists in Microsoft Edge related to the Chakra JavaScript engine's handling of objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'
A remote code execution vulnerability exists in Microsoft Edge related to how the Chakra JavaScript engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'
A remote code execution vulnerability exists in Microsoft Edge related to the way the Chakra JavaScript engine renders when handling objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser.
A remote code execution vulnerability exists in Microsoft Edge related to the way JavaScript engines render when handling objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'
A remote code execution vulnerability exists in Microsoft Edge related to errors in the JavaScript engine when handling objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'
A remote code execution vulnerability exists in Microsoft browsers related to the way JavaScript engines handle objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

