CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.29)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
ESPCMS P8.21120101 was found to have a remote code execution (RCE) vulnerability in the INPUT_ISDESCRIPTION component. An attacker can exploit this flaw to execute arbitrary code on the server.
ESPCMS P8.21120101 contains a remote code execution (RCE) vulnerability in the UPFILE_PIC_ZOOM_HIGHT component. An attacker can exploit this flaw to execute arbitrary code on the server.
A remote code execution vulnerability in Windows Scripting Languages.
Elevation of privilege vulnerability in Windows CNG Key Isolation Service. An attacker could exploit it to gain elevated privileges.
Elevation of privilege vulnerability in Microsoft Exchange Server. It allows an attacker to elevate their privileges in the Exchange environment.
A spoofing vulnerability in Microsoft SharePoint Server allows an attacker to impersonate a trusted resource or user. Exploitation could lead to tricking users and disclosing sensitive information.
Vulnerability in Windows System Monitor (Sysmon) allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
A remote code execution vulnerability in Visual Studio allows an attacker to execute arbitrary code in the user's context.
Vulnerability in Windows Scripting Languages allows remote code execution. An attacker could exploit it to run arbitrary code on a remote system.
Windows Bind Filter Driver Elevation of Privilege Vulnerability.
Vulnerability in the Windows Win32 Kernel Subsystem allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
Vulnerability in Windows Win32k allows elevation of privilege. It could be exploited to gain higher privileges on the system.
A vulnerability in Microsoft Office allows remote code execution through the processing of specially crafted graphics. An attacker can exploit this flaw to gain full control over the victim's system.
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
A vulnerability in Microsoft Excel allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
A vulnerability in Microsoft Excel allows security feature bypass. An attacker could exploit this flaw to bypass protective mechanisms and gain unauthorized access.
Information Disclosure vulnerability in Microsoft Word. Could allow an attacker to read data that should not be accessible.
Windows Overlay Filter Elevation of Privilege Vulnerability.
Windows Overlay Filter Elevation of Privilege Vulnerability.
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

