CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Sterownik w trybie jądra w systemach Microsoft Windows Vista SP2, Windows Server 2008 SP2 i R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold i R2, Windows RT 8.1 oraz Windows 10 Gold i 1511 pozwala lokalnym użytkownikom na uzyskanie uprawnień poprzez specjalnie przygotowaną aplikację. Jest to podatność znana jako 'Win32k Elevation of Privilege Vulnerability'.
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer 11 mishandles DLL loading, allowing local users to gain privileges via a crafted application.
Microsoft Internet Explorer 9 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website.
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-0155 and CVE-2016-0156.
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-0155 and CVE-2016-0157.
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-0156 and CVE-2016-0157.
A vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
The OLE vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted file. This affects multiple versions of the operating system, including Windows Vista, Windows 7, and Windows 8.1.
Podatność w subsystemie uruchomieniowym klient-serwer (CSRSS) w systemach Microsoft Windows 8.1, Windows Server 2012 oraz Windows 10 pozwala lokalnym użytkownikom na uzyskanie podwyższonych uprawnień poprzez odpowiednio przygotowaną aplikację. Jest to znane jako 'obejście zabezpieczeń CSRSS w Windows'.
HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service (system hang) via crafted HTTP 2.0 requests.
Microsoft .NET Framework versions 4.6 and 4.6.1 mishandle library loading, allowing local users to gain privileges via a crafted application.
Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, posing a significant security threat.
The font library in Microsoft Windows and certain applications allows remote attackers to execute arbitrary code via a crafted embedded font, known as 'Graphics Memory Corruption Vulnerability'.
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application.
Microsoft Excel 2010 SP2, Word for Mac 2011, and Excel Viewer have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
Microsoft Excel 2007 SP3, Excel 2010 SP2, and Excel Services on SharePoint Server 2007 SP3 and 2010 SP2 have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application.
A vulnerability in Microsoft Word and related products allows remote attackers to execute arbitrary code via a crafted Office document. This affects Word versions 2007, 2010, 2013, and various Office-related services.
A vulnerability in Microsoft Excel and Word allows remote attackers to execute arbitrary code via a crafted Office document. This affects Excel versions 2007 SP3, 2010 SP2, 2013 SP1, 2016, and Word 2016 for Mac.