CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.30)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2023-38176
High

A vulnerability in Azure Arc-Enabled Servers allows for elevation of privilege, potentially leading to unauthorized access to system resources.

CVE-2023-38175
High

A vulnerability in Microsoft Windows Defender allows for elevation of privilege, potentially leading to unauthorized access to the system.

CVE-2023-38172
HighEPSS 79%

A vulnerability in Microsoft Message Queuing (MSMQ) allows attackers to remotely trigger an error, leading to denial of service. Exploiting this flaw may result in MSMQ service unavailability.

CVE-2023-38170
High

The vulnerability in HEVC Video Extensions allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.

CVE-2023-38169
HighEPSS 68%

A vulnerability in Microsoft SQL OLE DB allows for remote code execution. An attacker can exploit this flaw to gain control over the system.

CVE-2023-38167
HighEPSS 70%

A vulnerability in Microsoft Dynamics 365 Business Central allows unauthorized users to elevate their privileges. Exploiting this flaw may lead to access to resources that the user should not have access to.

CVE-2023-38154
HighEPSS 54%

A vulnerability in the Windows kernel allows for privilege escalation, potentially leading to unauthorized access to the system.

CVE-2023-36914
Medium

A vulnerability in the Windows Smart Card Resource Management Server allows for a security feature bypass. An attacker could exploit this flaw to gain access to functions that should be protected.

CVE-2023-36913
MediumEPSS 75%

A vulnerability in Microsoft Message Queuing allows for information disclosure, potentially leading to unauthorized access to data.

CVE-2023-36912
HighEPSS 80%

A vulnerability in Microsoft Message Queuing (MSMQ) allows attackers to remotely trigger an error, leading to denial of service.

CVE-2023-36911
CriticalEPSS 75%

A vulnerability in Microsoft Message Queuing (MSMQ) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.

CVE-2023-36910
CriticalEPSS 83%

A vulnerability in Microsoft Message Queuing (MSMQ) allows for remote code execution. An attacker can exploit this flaw to take control of the system.

CVE-2023-36909
MediumEPSS 80%

A vulnerability in Microsoft Message Queuing (MSMQ) allows attackers to remotely trigger an error, leading to denial of service. Exploiting this flaw may result in service disruption of MSMQ.

CVE-2023-36908
MediumEPSS 58%

A vulnerability in Windows Hyper-V allows for information disclosure, potentially leading to unauthorized access to data.

CVE-2023-36907
MediumEPSS 75%

A vulnerability in Windows Cryptographic Services may lead to information disclosure. An attacker could exploit this flaw to gain access to sensitive data.

CVE-2023-36906
MediumEPSS 79%

A vulnerability in Windows Cryptographic Services allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.

CVE-2023-36905
MediumEPSS 75%

The vulnerability in the Windows Wireless Wide Area Network Service (WwanSvc) allows for information disclosure. An attacker can exploit this flaw to gain access to sensitive system data.

CVE-2023-36904
High

A vulnerability in the Windows Cloud Files Mini Filter Driver allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges on the system.

CVE-2023-36903
HighEPSS 74%

A vulnerability in the Windows System Assessment Tool allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges on the system.

CVE-2023-36900
HighEPSS 95%

A vulnerability in the Windows Common Log File System Driver allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges in the system.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS