CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An infinite loop in Azure Active Directory allows an unauthorized attacker to deny service over a network.
In Azure Active Directory, a deserialization of untrusted data vulnerability allows an unauthorized attacker to perform a denial of service (DoS) attack over the network.
A command injection vulnerability in Visual Studio Code allows an unauthorized attacker to execute code locally by failing to properly neutralize special elements used in commands.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
A race condition in Windows Clip Service allows an authorized attacker to elevate privileges locally.
Improper link resolution before file access in Windows Server Backup allows an authorized attacker to elevate privileges locally.
A race condition vulnerability in the Microsoft Windows App Store allows an authorized attacker to escalate privileges locally. Improper synchronization during concurrent resource access can be exploited to elevate privileges.
Use after free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.
Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.
Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network.
Missing authentication for a critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
An improper access control vulnerability exists in Windows Win32K. This allows an authorized attacker to elevate privileges locally.
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
A stack-based buffer overflow in the Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
Improper access control vulnerability in Windows Server. Allows an authorized attacker to elevate privileges locally.
Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally.
An improper access control vulnerability exists in Windows Win32K. This allows an authorized attacker to elevate privileges locally.
A use-after-free vulnerability exists in the Graphics Kernel. This allows an authorized attacker to elevate privileges locally.
A use-after-free vulnerability in the Windows Internal Task Bar allows an authorized attacker to elevate privileges locally.