CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Microsoft Office allows remote attackers to execute arbitrary code via a crafted file. This affects Office 2010 SP2, Word 2007 SP3, Word 2010 SP2, Word for Mac 2011, Word 2016 for Mac, and Word Viewer.
Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, known as 'Microsoft Office Memory Corruption Vulnerability.'
A vulnerability in Microsoft Office (2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and Word 2016 for Mac and Word Viewer) allows remote attackers to execute arbitrary code via a crafted file.
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
Sterowniki w trybie jądra w systemach Microsoft Windows Vista SP2, Windows Server 2008 SP2 i R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold i R2, Windows RT 8.1 oraz Windows 10 Gold, 1511 i 1607 pozwalają lokalnym użytkownikom na uzyskanie uprawnień poprzez specjalnie przygotowaną aplikację. Jest to podatność znana jako 'Win32k Elevation of Privilege Vulnerability'.
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
The Windows font library in various versions of Microsoft Windows and Office applications allows remote attackers to execute arbitrary code via a crafted embedded font.
The Windows font library in various versions of the operating system and Microsoft applications allows remote attackers to execute arbitrary code via a crafted embedded font, known as 'Windows Graphics Component RCE Vulnerability.'
The Windows font library in various Microsoft operating system versions and applications allows remote attackers to execute arbitrary code via a crafted embedded font.
The Netlogon service in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 improperly establishes secure communications channels, allowing local users to gain privileges by leveraging access to a domain-joined machine.
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, known as 'Scripting Engine Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, known as 'Microsoft Browser Memory Corruption Vulnerability.'
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted web page. This is a memory corruption vulnerability in the browser.
Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, known as 'Microsoft Browser Memory Corruption Vulnerability'.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted web page, known as 'Internet Explorer Memory Corruption Vulnerability.'
A vulnerability in Kerberos in Microsoft Windows allows man-in-the-middle attackers to bypass authentication during a domain account password change, related to a fallback to NTLM authentication.
CVE-2016-5330 describes an untrusted search path vulnerability in the HGFS (Shared Folders) feature in VMware Tools 10.0.5, allowing local users to gain privileges via a Trojan horse DLL in the current working directory.
IBM Security QRadar SIEM versions 7.1.x and 7.2.x before 7.2.7 allows remote authenticated users to execute arbitrary OS commands as root via unspecified vectors.
Siemens SINEMA Server uses weak permissions for the application folder, allowing local users to gain privileges via unspecified vectors.