CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Microsoft Windows and applications that allows remote attackers to execute arbitrary code via a crafted TrueType font. This affects multiple versions of operating systems and Microsoft applications.
The Adobe Type Manager library in Windows contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font. This affects multiple versions of Windows, including Vista, 7, 8, and Server 2008 and 2012.
Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, and various versions of Lync allow remote attackers to execute arbitrary code via a crafted Office Graphics Library (OGL) font.
A vulnerability in Microsoft Windows allows attackers to bypass an application sandbox protection mechanism and perform unspecified filesystem actions via a crafted application.
A vulnerability in Microsoft Windows allows attackers to bypass an application sandbox protection mechanism and perform unspecified registry actions via a crafted application.
Microsoft Office 2007 SP3, 2010 SP2 i 2013 SP1 zawiera podatność, która pozwala zdalnym atakującym na wykonanie dowolnego kodu poprzez spreparowany dokument, znaną jako 'Podatność na uszkodzenie pamięci w Microsoft Office'.
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before version 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
Microsoft Internet Explorer versions 7 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability.
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka 'Memory Corruption Vulnerability.'
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website. This is a memory corruption vulnerability.
Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 8 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 8 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 7 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Memory Corruption Vulnerability.'
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as in Adobe AIR before 18.0.0.199, allows attackers to execute arbitrary code.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as in Adobe AIR before 18.0.0.199, allows attackers to execute arbitrary code.