CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted .mcl file.
CVE-2015-6130 is a vulnerability related to integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1. It allows remote attackers to execute arbitrary code via a crafted font.
The vulnerability in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 involves improper library loading, allowing local users to gain privileges via a crafted application.
A race condition in the Pragmatic General Multicast (PGM) protocol in Windows allows local users to gain privileges or cause a denial of service via a crafted application.
A use-after-free vulnerability in the DNS server in Microsoft Windows Server 2008 SP2, R2 SP1, and Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests.
The vulnerability in Microsoft Word and Office allows remote attackers to execute arbitrary code via a crafted Office document. It affects Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, and Office Compatibility Pack SP3.
The vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allows remote attackers to execute arbitrary code via a crafted Office document.
Microsoft Office 2007 SP3 and Office 2010 SP2 have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document, known as 'Microsoft Office Memory Corruption Vulnerability.'
The Windows font library in various Microsoft operating system versions and applications allows remote attackers to execute arbitrary code via a crafted embedded font, known as 'Graphics Memory Corruption Vulnerability.'
The Windows font library in various Microsoft operating system versions and Office applications allows remote attackers to execute arbitrary code via a crafted embedded font, known as 'Graphics Memory Corruption Vulnerability.'
The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, and several versions of Office allows remote attackers to execute arbitrary code via a crafted embedded font, known as 'Graphics Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 8 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
The vulnerability in mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
Android versions before 5.1.1 LMY48Z and 6.0 before 2015-12-01 contain a vulnerability in the mediaserver component that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.
The vulnerability in mediaserver in Android before version 5.1.1 LMY48Z allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
Display drivers in Android before version 5.1.1 LMY48Z allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
Display drivers in Android before version 5.1.1 LMY48Z and 6.0 before December 1, 2015, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
Wi-Fi in Android 6.0 before December 1, 2015, allows attackers to gain privileges via a crafted application, potentially leading to Signature or SignatureOrSystem access.
SystemUI in Android 5.x before version 5.1.1 LMY48Z and 6.0 before December 1, 2015, allows attackers to gain privileges via a crafted application, enabling access to Signature or SignatureOrSystem levels.