CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.04)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2024-43487
MediumEPSS 64%

Security feature bypass vulnerability in Windows Mark of the Web. Could allow execution of dangerous files without warning.

CVE-2024-43482
MediumEPSS 63%

Information disclosure vulnerability in Microsoft Outlook for iOS. Could allow unauthorized access to data.

CVE-2024-43479
HighEPSS 56%

Vulnerability in Microsoft Power Automate Desktop allows remote code execution. An attacker could exploit it to run malicious code on the victim's system.

CVE-2024-43476
HighEPSS 54%

Cross-site Scripting (XSS) vulnerability in Microsoft Dynamics 365 (on-premises). Allows an attacker to inject malicious script into the page.

CVE-2024-43475
HighEPSS 75%

A vulnerability in Microsoft Windows Admin Center allows information disclosure. An attacker could exploit this flaw to access sensitive data.

CVE-2024-43474
HighEPSS 67%

Information disclosure vulnerability in Microsoft SQL Server. Could allow an attacker to gain access to sensitive data.

CVE-2024-43470
HighEPSS 55%

Vulnerability in Azure Network Watcher VM Agent allows elevation of privilege. An attacker could exploit this flaw to gain unauthorized access to resources or administrative functions.

CVE-2024-43469
HighEPSS 73%

Remote code execution vulnerability in Azure CycleCloud. Allows an attacker to execute code in the context of the application.

CVE-2024-43467
HighEPSS 63%

Vulnerability in Windows Remote Desktop Licensing Service allows remote code execution. An attacker can execute arbitrary code on the server.

CVE-2024-43465
HighEPSS 53%

Elevation of Privilege vulnerability in Microsoft Excel. Allows an attacker to gain higher privileges in the application context.

CVE-2024-43463
HighEPSS 58%

Vulnerability in Microsoft Office Visio allows remote code execution. An attacker could exploit it to run malicious code on the victim's system.

CVE-2024-43461
HighActively exploitedEPSS 99%

A spoofing vulnerability in the Windows MSHTML platform.

CVE-2024-43455
HighEPSS 75%

A vulnerability in the Windows Remote Desktop Licensing Service allows attackers to spoof the service. This may lead to unauthorized access to system resources.

CVE-2024-43454
HighEPSS 97%

Remote code execution vulnerability in Windows Remote Desktop Licensing Service. Allows an attacker to execute code remotely in the context of the service.

CVE-2024-38263
HighEPSS 64%

Vulnerability in Windows Remote Desktop Licensing Service allows remote code execution. An attacker can execute arbitrary code on the server.

CVE-2024-38260
HighEPSS 74%

Remote code execution vulnerability in Windows Remote Desktop Licensing Service. An attacker could exploit this flaw to execute arbitrary code in the service context.

CVE-2024-38259
HighEPSS 77%

Remote Code Execution vulnerability in Microsoft Management Console. An attacker could exploit this vulnerability to execute arbitrary code on the target system.

CVE-2024-38258
MediumEPSS 91%

An information disclosure vulnerability in the Windows Remote Desktop Licensing Service. Technical details are not available in the description.

CVE-2024-38257
HighEPSS 91%

Information disclosure vulnerability in the Microsoft AllJoyn API. It could allow an attacker to read sensitive data.

CVE-2024-38256
MediumEPSS 50%

A vulnerability in Windows Kernel-Mode Driver allows information disclosure. An attacker could exploit this flaw to access data that should be protected.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS