CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when handling a malformed PDF file. Successful exploitation could lead to arbitrary code execution.
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JBIG2 parsing functionality. Successful exploitation could lead to arbitrary code execution.
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in XML Forms Architecture (XFA) related to reset form functionality. Successful exploitation could lead to arbitrary code execution.
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability related to remote logging.
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier have an insecure library loading (DLL hijacking) vulnerability in the OCR plugin.
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the CCITT fax PDF filter. Successful exploitation could lead to arbitrary code execution.
Adobe Thor versions 3.9.5.353 and earlier have a vulnerability in the directory search path used to find resources, related to Creative Cloud desktop applications.
Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation of Creative Cloud desktop applications.
Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have an unquoted search path vulnerability.
Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnerability when parsing malicious PCX files. Successful exploitation could lead to arbitrary code execution.
Występuje podatność na podniesienie uprawnień, gdy Internet Explorer nieprawidłowo egzekwuje zasady dotyczące domen, co może pozwolić atakującemu na dostęp do informacji z jednej domeny i wstrzyknięcie ich do innej domeny.
A remote code execution vulnerability exists in Microsoft Edge due to improper access to objects in memory. This could corrupt memory in such a way that allows an attacker to execute arbitrary code in the context of the current user.
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. This vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.
A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines render when handling objects in memory. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current user.
A remote code execution vulnerability exists in Microsoft Edge due to improper access to objects in memory. This could corrupt memory in a way that allows an attacker to execute arbitrary code in the context of the current user.
Podatność CVE-2017-0199 dotyczy różnych wersji Microsoft Office oraz systemów Windows, które pozwalają zdalnym atakującym na wykonanie dowolnego kodu poprzez spreparowany dokument. Problem ten występuje w Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2016 oraz w systemach Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1 i Windows 8.1.
Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, known as 'Microsoft Office DLL Loading Vulnerability.'
A privilege escalation vulnerability exists in Windows 10 due to improper handling of objects in memory by the Windows kernel-mode driver. An attacker who successfully exploits this vulnerability could run arbitrary code in kernel mode.
A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10 or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system.
A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS