CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.21)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-70026
High

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-70025
MediumEPSS 57%

Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

CVE-2026-70024
CriticalEPSS 56%

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

CVE-2026-70023
High

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-70021
High

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-70017
Medium

Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

CVE-2026-70015
High

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-70014
HighEPSS 51%

Use after free in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network.

CVE-2026-70013
High

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70012
High

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-70011
Medium

Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.

CVE-2026-70010
High

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-70008
High

An integer overflow or wraparound exists in the Windows IP Over USB Service. An authorized attacker can exploit this vulnerability to elevate privileges locally.

CVE-2026-70007
High

An out-of-bounds write exists in .NET Framework. An unauthorized attacker can exploit this vulnerability to execute code over a network.

CVE-2026-70006
High

A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.

CVE-2026-70005
Medium

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-70004
High

A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.

CVE-2026-69999
Medium

Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.

CVE-2026-69998
High

A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.

CVE-2026-69997
High

A use after free exists in the Remote Desktop Client. An unauthorized attacker can exploit this vulnerability to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS