CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The ShellExecute API in Windows improperly implements file associations, allowing local users to gain privileges via a crafted application. This vulnerability was exploited in the wild in May 2014.
The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access, allowing remote attackers to execute arbitrary code via malformed objects.
Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1 have an untrusted search path vulnerability. This allows local users to gain privileges via a Trojan horse DLL in the current working directory when the Simplified Chinese Proofing Tool is enabled.
A use-after-free vulnerability in the FrameSelection::updateAppearance function in Blink, used in Google Chrome before version 34.0.1847.137, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper RenderObject handling.
Multiple integer overflows in the replace-data functionality in the CharacterData interface implementation in Blink, used in Google Chrome before version 34.0.1847.137, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to ranges.
Multiple use-after-free vulnerabilities in the WebSockets implementation in Google Chrome before version 34.0.1847.137 may allow remote attackers to cause a denial of service or potentially have unspecified other impacts related to WebSocketJob deletion.
Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
A double free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
The API in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X does not prevent access to unmapped memory, which allows attackers to execute arbitrary code via unspecified API calls.
Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player before version 13.0.0.214 on Windows and OS X and before version 11.2.202.359 on Linux, as well as Adobe AIR SDK before version 13.0.0.111, allow attackers to bypass intended access restrictions via unspecified vectors.
Adobe Flash Player before version 13.0.0.214 on Windows and OS X and before version 11.2.202.359 on Linux, as well as Adobe AIR SDK before version 13.0.0.111, allow attackers to bypass intended access restrictions via unspecified vectors.
Adobe Flash Player before version 13.0.0.214 on Windows and OS X and before version 11.2.202.359 on Linux, as well as Adobe AIR SDK before version 13.0.0.111, allows attackers to bypass intended access restrictions via unspecified vectors.
Adobe Flash Player before version 13.0.0.214 on Windows and OS X and before version 11.2.202.359 on Linux, as well as Adobe AIR SDK before version 13.0.0.111, allow attackers to bypass intended access restrictions via unspecified vectors.
Adobe Flash Player before version 13.0.0.214 on Windows and OS X and before version 11.2.202.359 on Linux, as well as Adobe AIR SDK before version 13.0.0.111, allow remote attackers to bypass the Same Origin Policy via unspecified vectors.
A stack-based buffer overflow in Adobe Illustrator CS6 before 16.0.5 and 16.2.x before 16.2.2 allows remote attackers to execute arbitrary code.