CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Security feature bypass vulnerability in Windows Mark of the Web. Could allow execution of dangerous files without warning.
Information disclosure vulnerability in Microsoft Outlook for iOS. Could allow unauthorized access to data.
Vulnerability in Microsoft Power Automate Desktop allows remote code execution. An attacker could exploit it to run malicious code on the victim's system.
Cross-site Scripting (XSS) vulnerability in Microsoft Dynamics 365 (on-premises). Allows an attacker to inject malicious script into the page.
A vulnerability in Microsoft Windows Admin Center allows information disclosure. An attacker could exploit this flaw to access sensitive data.
Information disclosure vulnerability in Microsoft SQL Server. Could allow an attacker to gain access to sensitive data.
Vulnerability in Azure Network Watcher VM Agent allows elevation of privilege. An attacker could exploit this flaw to gain unauthorized access to resources or administrative functions.
Remote code execution vulnerability in Azure CycleCloud. Allows an attacker to execute code in the context of the application.
Vulnerability in Windows Remote Desktop Licensing Service allows remote code execution. An attacker can execute arbitrary code on the server.
Elevation of Privilege vulnerability in Microsoft Excel. Allows an attacker to gain higher privileges in the application context.
Vulnerability in Microsoft Office Visio allows remote code execution. An attacker could exploit it to run malicious code on the victim's system.
A spoofing vulnerability in the Windows MSHTML platform.
A vulnerability in the Windows Remote Desktop Licensing Service allows attackers to spoof the service. This may lead to unauthorized access to system resources.
Remote code execution vulnerability in Windows Remote Desktop Licensing Service. Allows an attacker to execute code remotely in the context of the service.
Vulnerability in Windows Remote Desktop Licensing Service allows remote code execution. An attacker can execute arbitrary code on the server.
Remote code execution vulnerability in Windows Remote Desktop Licensing Service. An attacker could exploit this flaw to execute arbitrary code in the service context.
Remote Code Execution vulnerability in Microsoft Management Console. An attacker could exploit this vulnerability to execute arbitrary code on the target system.
An information disclosure vulnerability in the Windows Remote Desktop Licensing Service. Technical details are not available in the description.
Information disclosure vulnerability in the Microsoft AllJoyn API. It could allow an attacker to read sensitive data.
A vulnerability in Windows Kernel-Mode Driver allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

