CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.
A use-after-free vulnerability exists in Windows Runtime. An authenticated attacker can elevate privileges over the network.
Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally.
A heap-based buffer overflow in the Windows kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.
A use-after-free vulnerability in the Windows Kernel allows an authenticated attacker to elevate privileges locally.
An unhandled exception in Windows Server Update Service (WSUS) allows an unauthorized attacker to perform tampering over a network. This vulnerability could compromise the integrity of updates.
A heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.
The Windows Unified Consent System component contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
A race condition due to improper synchronization of shared resources in Windows Runtime allows an authorized attacker to elevate privileges locally.
A race condition in Windows USB Driver allows an authorized attacker to elevate privileges locally.
A race condition vulnerability exists in Windows Operating Systems during concurrent execution using a shared resource. An authorized attacker can exploit this to elevate privileges locally.
The Windows Image Acquisition component contains a null pointer dereference vulnerability that allows an authorized attacker to elevate privileges locally.
A use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
A use-after-free vulnerability exists in the Windows TCP/IP stack. This allows an authorized attacker to elevate privileges locally.