CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Adobe Type Manager Library in Microsoft Windows 10 allows local users to gain privileges via a crafted application.
The Adobe Type Manager Library in Windows allows local users to gain elevated privileges via a crafted application, known as 'Font Driver Elevation of Privilege Vulnerability.'
The Adobe Type Manager Library in Windows has a vulnerability that allows remote attackers to cause a system crash via a crafted OpenType font.
A vulnerability in Microsoft .NET Framework allows remote attackers to execute arbitrary code or bypass security restrictions via a crafted .NET application or XAML browser application (XBAP).
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Memory Corruption Vulnerability.'
Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 7 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability.
Microsoft Internet Explorer versions 7 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability.
A vulnerability in Microsoft Internet Explorer 7 through 11 and Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website. This is a memory corruption vulnerability.
The VBScript and JScript engines in Microsoft Internet Explorer 8 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability.
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 7 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website. This is a memory corruption vulnerability.
Microsoft Internet Explorer versions 7 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability.
Microsoft Internet Explorer versions 7 through 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website. This is a memory corruption vulnerability.
A vulnerability in Microsoft Internet Explorer 9-11 and Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, related to memory corruption.
Directory traversal vulnerability in dlopen in libvdpau before version 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.
libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related to the VDPAU_DRIVER_PATH environment variable.
The ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c in FFmpeg before version 2.7.2 does not initialize certain structure members, allowing remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via crafted RealVideo data (RV30 or RV40).
The ff_frame_thread_init function in libavcodec/pthread_frame.c in FFmpeg before version 2.7.2 mishandles certain memory-allocation failures, allowing remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via a crafted file, as demonstrated by an AVI file.