CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
An out-of-bounds read vulnerability in the Windows kernel allows an unauthorized attacker to disclose information over a network.
The Windows Ancillary Function Driver for WinSock has an external control of file name or path vulnerability, allowing an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
A race condition vulnerability in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
Use-after-free vulnerability in Microsoft Brokering File System that allows an authorized attacker to elevate privileges locally.
A use-after-free vulnerability in Windows Runtime allows an authorized attacker to elevate privileges locally.
Windows User Interface Core has a relative path traversal vulnerability, allowing an authorized attacker to elevate privileges locally.
A race condition in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.
In Windows Routing and Remote Access Service (RRAS), missing authentication for a critical function allows an authorized attacker to elevate privileges locally.
A race condition in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Missing authentication for a critical function in Windows Server Update Service (WSUS) allows an authorized attacker to elevate privileges over a network.
Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
A race condition vulnerability in the Windows Audio Service allows an authorized attacker to escalate privileges locally. Improper synchronization during concurrent resource access can be exploited to elevate privileges.
Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
A vulnerability in Microsoft PC Manager involves improper link resolution before file access ('link following'). This allows an authorized attacker to elevate privileges locally.
Use-After-Free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.