CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The vulnerability in vbscript.dll in Microsoft VBScript 5.6 through 5.8, used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website.
A vulnerability in Microsoft Excel allows remote attackers to execute arbitrary code via a crafted Office document. This affects Excel 2007 SP3, 2010 SP2, 2013 Gold and SP1, and Office Compatibility Pack.
Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
A use-after-free vulnerability in various versions of Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document.
Array index error in Microsoft Word 2007 SP3, Word 2010 SP2, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document.
Microsoft Internet Explorer 9 has a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website. This is a memory corruption vulnerability.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website. This is a memory corruption vulnerability.
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
Adobe Flash Player versions before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
W Adobe Flash Player przed wersją 13.0.0.259 oraz 14.x i 15.x przed wersją 15.0.0.246 na systemach Windows i OS X oraz przed wersją 11.2.202.425 na Linuksie występuje przepełnienie bufora na stosie. Umożliwia to atakującym wykonanie dowolnego kodu poprzez nieokreślone wektory, co zostało wykorzystane w praktyce w grudniu 2014 roku.
Adobe Flash Player versions before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allow attackers to obtain sensitive information via unspecified vectors.
A heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat in versions 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X have a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
A heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through unspecified vectors. This is a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8461, and CVE-2014-9158.
Adobe Reader and Acrobat versions 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through unspecified vectors. This is a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
A heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
Adobe Reader and Acrobat in versions 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X have a vulnerability that allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.