CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.29)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability allowing bypass of BitLocker security features. An attacker could bypass BitLocker protections and gain unauthorized access to encrypted data.
A vulnerability in Windows GDI+ allows information disclosure. An attacker could exploit this flaw to access sensitive data.
An information disclosure vulnerability in the RADIUS protocol in Network Policy Server (NPS) allows an attacker to gain access to sensitive data. The flaw could be exploited to intercept authentication information or other data transmitted over the network.
Elevation of privilege vulnerability in Microsoft DWM Core Library. Could be exploited to gain elevated privileges.
Windows Digital Media Receiver Elevation of Privilege Vulnerability.
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
Elevation of privilege vulnerability in Windows Win32k. Could be exploited to gain elevated privileges.
Security feature bypass vulnerability in Windows Mark of the Web. It allows an attacker to bypass security protections related to files downloaded from the internet.
Denial of Service vulnerability in Windows Point-to-Point Tunneling Protocol (PPTP). Can cause failure of network services.
Vulnerability in Windows Point-to-Point Tunneling Protocol allows remote code execution. An attacker could exploit it to run malicious code on a remote system.
Windows Group Policy Elevation of Privilege Vulnerability.
Elevation of privilege vulnerability in Azure CycleCloud. An attacker could exploit it to gain unauthorized privileges.
Elevation of privilege vulnerability in Microsoft Exchange Server. Allows an attacker to elevate their privileges in the system.
Spoofing vulnerability in Microsoft Exchange Server. Allows an attacker to impersonate another user or sender.
A spoofing vulnerability in Microsoft Exchange Server allows an attacker to impersonate another entity in communication.
Elevation of privilege vulnerability in Windows Print Spooler. An attacker could exploit it to gain elevated privileges.
Information disclosure vulnerability in Microsoft Dynamics Business Central. Could allow an attacker to read sensitive business data.
A vulnerability in .NET Framework allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
A vulnerability in Microsoft Excel allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw to run malicious software on the infected device.
Remote code execution vulnerability in Microsoft SharePoint Server. Allows an attacker to execute code on the server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS