CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.29)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Microsoft Word allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious Word documents.
A vulnerability in Microsoft Word allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
Denial of Service vulnerability in Windows Network Address Translation (NAT). An attacker could exploit this vulnerability to cause the NAT service to crash.
Vulnerability in Windows HTTP.sys allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
Denial of Service vulnerability in the RADIUS protocol in Windows Network Policy Server (NPS). An attacker could exploit this vulnerability to cause the service to crash.
A vulnerability in the Windows Human Interface Device driver allows information disclosure.
A vulnerability in the Windows Resilient File System (ReFS) allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Denial of Service vulnerability in Windows Kerberos. An attacker could exploit this vulnerability to cause the Kerberos service to crash.
Remote Code Execution vulnerability in Windows Graphics Component. Allows an attacker to execute code in the context of the current user.
A remote code execution vulnerability in Azure RTOS GUIX Studio allows an attacker to execute arbitrary code.
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability.
Security feature bypass vulnerability in Windows Mark of the Web. It allows an attacker to bypass security protections related to files downloaded from the internet.
Remote code execution vulnerability in Microsoft ODBC Driver. An attacker could exploit this flaw to execute code remotely.
Remote code execution vulnerability in Microsoft ODBC Driver. It allows an attacker to execute code remotely on the system.
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
Vulnerability in Windows Point-to-Point Tunneling Protocol allows remote code execution. An attacker could exploit it to run arbitrary code on a remote system.
Vulnerability in Windows Point-to-Point Tunneling Protocol allows remote code execution. An attacker could exploit it to run arbitrary code on a remote system.
Elevation of privilege vulnerability in Netlogon RPC. It allows an attacker to elevate privileges in a Windows domain.
A vulnerability in Windows Hyper-V allows an attacker to perform a Denial of Service attack.
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS