CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.22)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
The Installer in Microsoft Windows mishandles library loading, allowing local users to gain privileges via a crafted application.
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document.
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document.
Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document.
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
A vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document.
Microsoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandle library loading, allowing local users to gain privileges via a crafted application.
Uniscribe in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted web site. This affects multiple versions of Windows, including Vista, 7, 8.1, 10, and Windows Server.
The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site.
The graphics component in Windows allows remote attackers to execute arbitrary code via a crafted website. This affects multiple versions of Windows, including Vista, 7, 8.1, 10, and Windows Server.
The Secure Kernel Mode implementation in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to bypass the virtual trust level (VTL) protection mechanism via a crafted application.
The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, allowing remote attackers to bypass the Always Encrypted protection mechanism and obtain sensitive cleartext information.
Microsoft Word and other Office applications have a vulnerability that allows remote attackers to obtain sensitive information from process memory or cause a denial of service via a crafted document.
Microsoft Excel versions 2007 SP3, 2010 SP2, 2013 SP1, 2016, and other related applications mishandle a registry check, allowing user-assisted remote attackers to execute arbitrary commands via crafted embedded content in a document.
Microsoft Excel and Excel services on SharePoint have a vulnerability that allows remote attackers to obtain sensitive information from process memory or cause a denial of service via a crafted document.