CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Windows Overlay Filter has a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.
A heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
A stack-based buffer overflow vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to remotely execute code or cause a denial of service (DoS) by sending a specially crafted network request.
An integer underflow (wrap or wraparound) vulnerability in the Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
In Roundcube Webmail before versions 1.6.17 and 1.7.x before 1.7.2, a stored Cross-Site Scripting (XSS) vulnerability exists via a crafted plain-text email message. The attacker-controlled JavaScript executes within the victim's authenticated session simply by opening or previewing the message (zero-click).
A use-after-free vulnerability exists in Windows Hyper-V. This allows an authorized attacker to elevate privileges locally.
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
A heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. The vulnerability occurs during the processing of specially crafted graphics data.
Infinite loop vulnerability in Windows Active Directory. An unauthorized attacker can remotely cause a denial of service.
Use-After-Free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
A race condition vulnerability due to improper synchronization of shared resources has been discovered in the Windows Win32K component. This flaw allows an authorized attacker to elevate privileges locally.
A race condition in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
A race condition in the Windows Win32K driver allows an authorized attacker to elevate privileges locally due to improper synchronization of shared resources. This vulnerability can be exploited to gain higher system privileges.
Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
A heap-based buffer overflow vulnerability in the Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to remotely cause a denial of service (DoS).
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
A use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
A relative path traversal vulnerability in Age of Empires II: Definitive Edition allows an unauthorized attacker to execute code over a network.