CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.29)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Remote code execution vulnerability in Microsoft ODBC Driver. Could allow an attacker to execute code on the system.
Spoofing Vulnerability in Microsoft Edge (Chromium-based). An attacker could impersonate a trusted source.
Elevation of privilege vulnerability in Azure App Service on Azure Stack Hub. Could be exploited to gain elevated privileges in the cloud environment.
Denial of service vulnerability in .NET Framework.
Elevation of privilege vulnerability in Microsoft OneNote.
Tampering vulnerability in Microsoft Edge (Chromium-based).
Remote code execution vulnerability in Microsoft ODBC Driver for SQL Server. An attacker could exploit it to run arbitrary code on the system.
Elevation of privilege vulnerability in Microsoft SharePoint Server. Allows an attacker to gain higher privileges in the SharePoint environment.
Remote code execution vulnerability in Microsoft Word. An attacker could exploit this vulnerability to execute arbitrary code in the context of the logged-on user.
Microsoft Publisher Security Feature Bypass Vulnerability. Details are not provided in the description, but it allows an attacker to bypass security features.
Information disclosure vulnerability in Microsoft Office. An attacker could exploit this flaw to gain access to sensitive data.
Microsoft SQL Server Remote Code Execution Vulnerability. An attacker could exploit this vulnerability to execute code remotely on the SQL server.
Remote code execution vulnerability in Microsoft Exchange Server. Allows an attacker to execute arbitrary code in the context of the Exchange server.
Remote code execution vulnerability in Microsoft Exchange Server. An attacker could exploit it to run arbitrary code on the server.
Remote code execution vulnerability in Microsoft SQL Server. An attacker could exploit it to execute arbitrary code on the server.
Remote code execution vulnerability in Microsoft ODBC Driver for SQL Server. Could allow arbitrary code execution.
Remote code execution vulnerability in Azure Data Box Gateway.
Denial of Service vulnerability in Windows iSCSI Service. An attacker could cause the service to crash, leading to unavailability of resources.
Denial of Service vulnerability in Microsoft Protected Extensible Authentication Protocol (PEAP). An attacker could cause the service to crash, leading to unavailability of authentication.
Denial of Service vulnerability in Windows iSCSI Discovery Service. An attacker could cause the service to crash, leading to unavailability of iSCSI discovery functionality.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS