CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a vulnerability related to Microsoft Browser Memory Corruption.
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in the browser.
Microsoft Internet Explorer 10 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability'.
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Microsoft Browser Memory Corruption Vulnerability'.
A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via crafted media content. This affects several versions of the operating system, including Windows 7, 8.1, 10, and Windows Server.
A vulnerability in Microsoft Windows Vista SP2 and Server 2008 SP2 related to improper library loading, allowing local users to gain privileges via a crafted application.
Usługa drugiego logowania w systemach Microsoft Windows (Vista SP2, Server 2008 SP2 i R2 SP1, 7 SP1, 8.1, Server 2012 Gold i R2, RT 8.1 oraz 10 Gold i 1511) nieprawidłowo przetwarza uchwyty żądań, co pozwala lokalnym użytkownikom na uzyskanie uprawnień za pomocą odpowiednio przygotowanej aplikacji.
A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via crafted media content. This affects multiple versions of Windows, including Windows 7, 8.1, and 10.
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application.
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application.
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
The kernel-mode driver in Microsoft Windows allows local users to gain elevated privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
The OLE vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted file. This affects multiple versions of Windows, including Vista, 7, 8.1, 10, and Server 2008 and 2012.
The OLE vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted file. It affects multiple versions of Windows, including Vista, 7, 8.1, 10, and servers 2008 and 2012.
The vulnerability in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 involves improper handle validation, allowing local users to gain elevated privileges via a crafted application.
Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 does not properly sign an unspecified binary file, allowing local users to gain privileges via a Trojan horse file with a crafted signature.