CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.29)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2022-44088
CriticalEPSS 97%

ESPCMS P8.21120101 was found to have a remote code execution (RCE) vulnerability in the INPUT_ISDESCRIPTION component. An attacker can exploit this flaw to execute arbitrary code on the server.

CVE-2022-44087
CriticalEPSS 71%

ESPCMS P8.21120101 contains a remote code execution (RCE) vulnerability in the UPFILE_PIC_ZOOM_HIGHT component. An attacker can exploit this flaw to execute arbitrary code on the server.

CVE-2022-41128
HighActively exploitedEPSS 98%

A remote code execution vulnerability in Windows Scripting Languages.

CVE-2022-41125
HighActively exploitedEPSS 86%

Elevation of privilege vulnerability in Windows CNG Key Isolation Service. An attacker could exploit it to gain elevated privileges.

CVE-2022-41123
High

Elevation of privilege vulnerability in Microsoft Exchange Server. It allows an attacker to elevate their privileges in the Exchange environment.

CVE-2022-41122
MediumEPSS 71%

A spoofing vulnerability in Microsoft SharePoint Server allows an attacker to impersonate a trusted resource or user. Exploitation could lead to tricking users and disclosing sensitive information.

CVE-2022-41120
HighEPSS 62%

Vulnerability in Windows System Monitor (Sysmon) allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.

CVE-2022-41119
HighEPSS 52%

A remote code execution vulnerability in Visual Studio allows an attacker to execute arbitrary code in the user's context.

CVE-2022-41118
HighEPSS 61%

Vulnerability in Windows Scripting Languages allows remote code execution. An attacker could exploit it to run arbitrary code on a remote system.

CVE-2022-41114
High

Windows Bind Filter Driver Elevation of Privilege Vulnerability.

CVE-2022-41113
HighEPSS 95%

Vulnerability in the Windows Win32 Kernel Subsystem allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.

CVE-2022-41109
HighEPSS 94%

Vulnerability in Windows Win32k allows elevation of privilege. It could be exploited to gain higher privileges on the system.

CVE-2022-41107
HighEPSS 54%

A vulnerability in Microsoft Office allows remote code execution through the processing of specially crafted graphics. An attacker can exploit this flaw to gain full control over the victim's system.

CVE-2022-41106
HighEPSS 81%

A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.

CVE-2022-41105
MediumEPSS 51%

A vulnerability in Microsoft Excel allows information disclosure. An attacker could exploit this flaw to access data that should be protected.

CVE-2022-41104
MediumEPSS 51%

A vulnerability in Microsoft Excel allows security feature bypass. An attacker could exploit this flaw to bypass protective mechanisms and gain unauthorized access.

CVE-2022-41103
MediumEPSS 56%

Information Disclosure vulnerability in Microsoft Word. Could allow an attacker to read data that should not be accessible.

CVE-2022-41102
High

Windows Overlay Filter Elevation of Privilege Vulnerability.

CVE-2022-41101
High

Windows Overlay Filter Elevation of Privilege Vulnerability.

CVE-2022-41100
High

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS