CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-6680.
Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. This is a different vulnerability than CVE-2015-6681.
Sterownik w trybie jądra w systemach Microsoft Windows Vista SP2, Windows Server 2008 SP2 i R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold i R2, Windows RT Gold i 8.1 oraz Windows 10 pozwala lokalnym użytkownikom na uzyskanie uprawnień poprzez specjalnie przygotowaną aplikację. Jest to podatność znana jako 'Win32k Memory Corruption Elevation of Privilege Vulnerability'.
Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1 oraz 2013 RT SP1 zawiera podatność, która pozwala zdalnym atakującym na wykonanie dowolnego kodu poprzez spreparowany obraz EPS. Jest to znane jako 'Podatność na źle sformatowany plik EPS w Microsoft Office'.
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption via a crafted website.
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Memory Corruption Vulnerability.'
Windows Journal in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted .jnt file, known as 'Windows Journal RCE Vulnerability'.
Microsoft Windows 8, 8.1, Server 2012 Gold and R2, RT Gold and 8.1, and Windows 10 do not properly constrain impersonation levels, allowing local users to gain privileges via a crafted application.
The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows does not properly constrain impersonation levels, allowing local users to gain privileges via a crafted application.
Task Scheduler in Windows allows local users to bypass intended filesystem restrictions and delete arbitrary files. This issue affects multiple versions of Windows, including Vista, 7, 8, 10, and Server 2008 and 2012.
Microsoft Windows 8, 8.1, Windows Server 2012, and Windows 10 have a vulnerability related to improper constraint of impersonation levels. This allows local users to gain elevated privileges via a crafted application.
A vulnerability in Microsoft Excel allows remote attackers to execute arbitrary code via a crafted Office document. This affects Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer.
Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer contain a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
Integer overflow in Windows Journal in various versions of Windows allows remote attackers to execute arbitrary code via a crafted .jnt file.
Windows Journal in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted .jnt file, known as 'Windows Journal RCE Vulnerability'.
Windows Journal in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted .jnt file, known as 'Windows Journal RCE Vulnerability'.
The Adobe Type Manager Library in Windows allows local users to gain elevated privileges via a crafted application, known as 'Font Driver Elevation of Privilege Vulnerability'.
Buffer overflow in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, and in Office 2007 SP3, Office 2010 SP2, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted OpenType font.
Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Media Center link (mcl) file.