CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Cisco IOS XR versions 4.0.1 through 4.2.0 for the CRS-3 Carrier Routing System allows remote attackers to cause a denial of service via crafted IPv6 extension headers, leading to NPU ASIC scan and line-card reload.
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.292 and in versions 14.x through 18.x before 18.0.0.160 on Windows and OS X, as well as before 11.2.202.466 on Linux. Similar issues exist in Adobe AIR and its SDK on various platforms, allowing attackers to execute arbitrary code.
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.292 and in versions 14.x through 18.x before 18.0.0.160 on Windows and OS X, as well as before 11.2.202.466 on Linux. Similar issues exist in Adobe AIR and its SDK on various platforms, allowing attackers to execute arbitrary code.
Adobe Flash Player and Adobe AIR in specific versions on various operating systems allow attackers to execute arbitrary code or cause a denial of service through unspecified vectors.
Integer overflow in Adobe Flash Player before version 13.0.0.292 and 14.x through 18.x before version 18.0.0.160 on Windows and OS X, as well as before version 11.2.202.466 on Linux, allows attackers to execute arbitrary code.
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.292 and in versions 14.x through 18.x before 18.0.0.160 on Windows and OS X, as well as before 11.2.202.466 on Linux. Similar issues exist in Adobe AIR and its SDK on various platforms, allowing attackers to execute arbitrary code.
A stack-based buffer overflow in Adobe Flash Player and Adobe AIR allows attackers to execute arbitrary code. This affects versions before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X, and before 11.2.202.466 on Linux.
Podatność w win32k.sys w sterownikach trybu jądra systemu Microsoft Windows umożliwia lokalnym użytkownikom uzyskanie podwyższonych uprawnień lub spowodowanie odmowy usługi poprzez złośliwą aplikację. Dotyczy to wielu wersji systemów Windows, w tym Windows Server 2003, Windows Vista, Windows 7, Windows 8 oraz Windows 10.
Microsoft Office 2013 SP1 i 2013 RT SP1 umożliwia zdalnym atakującym wykonanie dowolnego kodu poprzez spreparowany dokument Office, znany jako 'Podatność na użycie niezainicjowanej pamięci w Microsoft Office'.
The vulnerability in win32k.sys in kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain elevated privileges or cause a denial of service via a crafted application.
Microsoft Internet Explorer versions 6 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
The vulnerability in Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document.
Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, known as 'Microsoft Office Memory Corruption Vulnerability.'
A use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted web site accessed with the F12 Developer Tools feature of Internet Explorer.
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
Microsoft Internet Explorer 8 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website. This is a memory corruption vulnerability.
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2015-1741.
Microsoft Internet Explorer 10 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website. This is a memory corruption vulnerability.