CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in .NET allows denial of service (DoS).
A vulnerability in Microsoft Azure Kubernetes Service Confidential Container allows elevation of privilege. An attacker could exploit it to gain higher privileges in the confidential container environment.
Elevation of privilege vulnerability in the Microsoft Entra Jira Single-Sign-On plugin. It allows an attacker to elevate privileges in the Jira application.
A vulnerability in Microsoft Azure File Sync allows elevation of privilege. Technical details are not provided in the description.
Vulnerability in Dynamics 365 Sales allows spoofing. An attacker can impersonate another user or system.
XSS vulnerability in Microsoft Dynamics 365 (on-premises) allows injection of malicious script. Attacker can execute script in victim's browser.
Vulnerability in Dynamics 365 Field Service allows spoofing. An attacker can impersonate another user or system.
XSS vulnerability in Microsoft Dynamics 365 (on-premises) allows injection of malicious script into victim's browser. Attacker can steal data or hijack session.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.
XSS vulnerability in Microsoft Dynamics 365 (on-premises) allows injection of malicious script. Attacker can execute script in victim's context.
Denial of Service vulnerability in .NET. An attacker could cause a crash of applications using .NET.
Vulnerability in Microsoft Office OneNote allows remote code execution. An attacker could exploit this flaw to run malicious code on the victim's machine.
A Spoofing vulnerability in Microsoft Azure Active Directory B2C allows an attacker to impersonate the service or users.
A vulnerability in Microsoft Dynamics Business Central/NAV allows information disclosure. An attacker could exploit this flaw to access sensitive data.
A vulnerability in Microsoft Word allows remote code execution. An attacker could exploit this flaw to run malicious code on the victim's machine.
Remote code execution vulnerability in Microsoft Outlook. Allows an attacker to execute code remotely in the context of the user.
A vulnerability in Windows DNS allows information disclosure. An attacker could exploit this flaw to access sensitive data.
A vulnerability in Microsoft Azure Kubernetes Service Confidential Container allows remote code execution. An attacker could exploit it to execute arbitrary code within the confidential container context.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code in the user's context.
Information disclosure vulnerability in Microsoft Teams for Android. May allow access to sensitive data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS