CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Adobe Flash Player and Adobe AIR in certain versions improperly restrict memory address discovery, allowing attackers to bypass the ASLR protection mechanism. The issue affects versions before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X, and before 11.2.202.400 on Linux.
Adobe Flash Player and Adobe AIR in certain versions improperly restrict memory address discovery, allowing attackers to bypass the ASLR protection mechanism. This issue affects various platforms, including Windows, OS X, Linux, and Android.
Adobe Flash Player and Adobe AIR in certain versions do not properly restrict discovery of memory addresses, allowing attackers to bypass the ASLR protection mechanism.
Adobe Flash Player and Adobe AIR in versions before specified numbers have a vulnerability that allows attackers to bypass intended access restrictions. This affects Windows, OS X, and Linux systems.
Adobe Flash Player and Adobe AIR in certain versions do not properly restrict discovery of memory addresses, allowing attackers to bypass the ASLR protection mechanism. This issue affects versions before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X, and before 11.2.202.400 on Linux.
A use-after-free vulnerability in Adobe Flash Player before version 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X, as well as before version 11.2.202.400 on Linux, allows attackers to execute arbitrary code.
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2014-2796, CVE-2014-2808, CVE-2014-2825, CVE-2014-4050, and CVE-2014-4055.
Microsoft Internet Explorer versions 6 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption via a crafted website.
Microsoft Internet Explorer versions 7 through 10 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2014-2796, CVE-2014-2808, CVE-2014-2825, CVE-2014-4050, and CVE-2014-4067.
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 8 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability,' which is a different vulnerability than CVE-2014-2784.
Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
Microsoft Internet Explorer versions 6 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
Microsoft Internet Explorer versions 6 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2014-2796, CVE-2014-2808, CVE-2014-4050, CVE-2014-4055, and CVE-2014-4067.
Microsoft Internet Explorer 8 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption via a crafted website.
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'