CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A security feature bypass vulnerability in Windows SmartScreen.
Remote code execution vulnerability in Microsoft WDAC OLE DB provider for SQL Server. An attacker could exploit this flaw to execute arbitrary code on the system.
Remote code execution vulnerability in Microsoft ActiveX Data Objects. An attacker could exploit this flaw to execute arbitrary code in the user's context.
Denial of Service vulnerability in Internet Connection Sharing (ICS). An attacker could exploit this flaw to cause a service crash.
Remote code execution vulnerability in Microsoft ODBC Driver. An attacker could exploit this flaw to execute code remotely.
Elevation of privilege vulnerability in the Win32k driver. It could allow an attacker to gain administrator privileges.
A Denial of Service vulnerability in Windows Network Address Translation (NAT) allows an attacker to cause service failure or unavailability. The attack can be performed remotely without authentication.
Denial of service vulnerability in Windows Network Address Translation (NAT). An attacker could cause the NAT service to crash, potentially disrupting network connectivity.
Remote code execution vulnerability in the Windows kernel. Allows an attacker to execute code with elevated privileges.
Information disclosure vulnerability in the Windows kernel. It may allow an attacker to access data that should be protected.
A vulnerability in the Windows USB Generic Parent Driver allows remote code execution.
Elevation of privilege vulnerability in the Windows kernel, allowing an attacker to gain higher privileges on the system.
Vulnerability in Azure Connected Machine Agent allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
Spoofing vulnerability in Dynamics 365 Sales. An attacker could impersonate another user or system, potentially leading to unauthorized access or data manipulation.
Cross-Site Scripting (XSS) vulnerability in Microsoft Dynamics 365 Customer Engagement. Allows an attacker to inject malicious script into the victim's browser.
Elevation of privilege vulnerability in Microsoft Defender for Endpoint Protection. An attacker could exploit it to gain elevated privileges.
A vulnerability in Trusted Compute Base allows elevation of privilege. Technical details are not provided in the description.
A vulnerability in Skype for Business allows information disclosure.
Denial of Service vulnerability in Windows Hyper-V. An attacker can cause failure or unavailability of virtualization services.
A spoofing vulnerability in Azure Stack Hub allows an attacker to impersonate a trusted resource or user. Exploitation could lead to tricking users and disclosing sensitive information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

