CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.21)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-105725
High

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

CVE-2026-105723
HighEPSS 66%

Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-105722
High

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-105720
Medium

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. The flaw enables bypassing access control mechanisms.

CVE-2026-105719
MediumEPSS 61%

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. The flaw stems from insufficient verification of input data.

CVE-2026-105718
HighEPSS 56%

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-105717
HighEPSS 55%

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105716
HighEPSS 54%

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105715
High

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-105714
High

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105713
Medium

Server-side request forgery (SSRF) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network. The flaw enables making requests to internal resources.

CVE-2026-105599
High

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

CVE-2026-105598
HighEPSS 54%

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105597
HighEPSS 54%

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105596
HighEPSS 54%

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105595
HighEPSS 54%

Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105593
HighEPSS 54%

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105592
High

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105591
HighEPSS 54%

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-105016
CriticalEPSS 62%

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS