CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via a crafted loadSound call.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
Adobe Flash Player versions before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as Adobe AIR and its SDK versions before 19.0.0.241, allow remote attackers to bypass intended access restrictions and write to files via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via a crafted getBounds call.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted setMask arguments.
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion' in the NetConnection object implementation.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via crafted actionInstanceOf arguments.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted actionCallMethod arguments.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via crafted actionImplementsOp arguments.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted actionExtends arguments.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted attachSound arguments.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted globalToLocal arguments.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via a crafted gridFitType property value.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via crafted DefineFunction atoms.
The Adobe Type Manager Library in Windows allows remote attackers to execute arbitrary code via a crafted embedded font, known as 'Windows Graphics Memory Remote Code Execution Vulnerability'.
The Adobe Type Manager Library in Windows allows remote attackers to execute arbitrary code via a crafted embedded font, known as 'Windows Graphics Memory Remote Code Execution Vulnerability'.
Buffer overflow in the Network Driver Interface Standard (NDIS) implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application.
CVE-2015-6097 involves a heap-based buffer overflow in Windows Journal affecting Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. Remote attackers can execute arbitrary code via a crafted Journal (.jnt) file.
Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2013 SP1 have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
A vulnerability in Microsoft Office and related services allows remote attackers to execute arbitrary code via a crafted Office document. This affects Office versions 2007, 2010, 2013, and Word Automation Services on SharePoint.