CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, as well as in DC Classic and DC Continuous versions before specified versions, allows attackers to execute arbitrary code.
Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.
Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to bypass intended access restrictions and perform a transition from Low Integrity to Medium Integrity via unspecified vectors.
Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.
Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.
Adobe Reader and Acrobat in versions 10.x before 10.1.15 and 11.x before 11.0.12, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Shockwave Player before 12.1.9.159 contains a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Shockwave Player before 12.1.9.159 contains a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Microsoft SQL Server versions 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 do not prevent the use of uninitialized memory during attempts to execute virtual functions, allowing remote authenticated users to execute arbitrary code via a crafted query.
A vulnerability in Microsoft SQL Server allows remote authenticated users to execute arbitrary code by leveraging uninitialized memory in function calls related to transactional replication. This requires certain permissions and a crafted query.
W bibliotece ATMFD.DLL w Adobe Type Manager Font Driver w systemach Windows występuje podatność, która pozwala lokalnym użytkownikom na uzyskanie podwyższonych uprawnień poprzez specjalnie przygotowaną aplikację. Jest to znane jako 'Podatność na uszkodzenie pamięci w ATMFD.DLL'.
The authentication implementation in the RPC subsystem in various versions of Windows has a vulnerability that allows local users to gain elevated privileges via a crafted application.
The vulnerability in win32k.sys in the kernel-mode drivers of Microsoft Windows allows local users to gain elevated privileges via a crafted application.
The vulnerability in win32k.sys in kernel-mode drivers of Microsoft Windows allows local users to gain elevated privileges via a crafted application.
The graphics component in Microsoft Windows, including Windows Server 2003, Vista, 7, 8, 8.1, and Server 2012, contains a vulnerability that allows local users to gain elevated privileges via a crafted application leveraging an incorrect bitmap conversion.
The vulnerability in win32k.sys in the kernel-mode drivers of Microsoft Windows allows local users to gain elevated privileges via a crafted application.
Microsoft Internet Explorer 11 umożliwia zdalnym atakującym wykonanie dowolnego kodu lub spowodowanie odmowy usługi (uszkodzenie pamięci) poprzez spreparowaną stronę internetową, znaną jako 'Podatność na uszkodzenie pamięci w Internet Explorer'.
Podatność w Microsoft PowerPoint i Word umożliwia zdalnym atakującym wykonanie dowolnego kodu lub spowodowanie awarii usługi (uszkodzenie pamięci) poprzez spreparowany dokument Office. Dotyczy to wersji 2007, 2010 oraz 2013 tych aplikacji.
Microsoft Internet Explorer versions 6 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.