CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.20)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
A vulnerability in .NET allows an unauthorized attacker to read data outside the allowed memory area over a network.
A vulnerability in .NET related to improper link resolution before file access allows an authorized attacker to elevate privileges locally.
A cross-site scripting (XSS) vulnerability in ASP.NET Core allows an unauthorized attacker to execute code over a network.
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
A vulnerability in .NET related to improper link resolution before file access allows an authorized attacker to elevate privileges locally.
A vulnerability in .NET involving an out-of-bounds write allows an unauthorized attacker to execute code over a network.
A use-after-free vulnerability in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
A vulnerability in Active Directory Federation Services (AD FS) related to improper certificate validation allows an unauthorized attacker to perform spoofing over a network.
A code injection vulnerability in Windows Assigned Access allows an authorized attacker to elevate privileges locally.
An out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. The flaw occurs when data is written outside the allocated memory area.
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
A heap-based buffer overflow vulnerability in Windows NTFS allows an authorized attacker to elevate privileges locally.
A use-after-free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.
A race condition vulnerability in Windows Autopilot arises from improper synchronization when accessing a shared resource. An authenticated attacker can exploit this flaw to elevate privileges locally.
An out-of-bounds read vulnerability in Windows Network File System allows an authenticated attacker to elevate privileges locally. The flaw stems from improper reading of data beyond buffer boundaries.
A use of uninitialized resource vulnerability in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS