CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
A race condition in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
The Windows Win32K component has an improper access control vulnerability that allows an authorized attacker to elevate privileges locally.
A race condition in the Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
A race condition in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Windows GDI+ has a heap-based buffer overflow vulnerability, allowing an unauthorized attacker to execute code locally.
Use-After-Free vulnerability in Windows Kernel allows an authorized attacker to elevate privileges locally.
A heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
A numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
A vulnerability in the Windows Universal Disk Format (UDFS) file system driver allows elevation of privilege. The flaw can be exploited locally by an authenticated attacker to gain higher privileges on the system.
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.
Unrestricted resource allocation vulnerability in Windows HTTP.sys. An unauthorized attacker can remotely cause a denial of service.
A race condition vulnerability in the Microsoft Windows App Store allows an authorized attacker to escalate privileges locally. Improper synchronization during concurrent resource access can be exploited to elevate privileges.
Improperly implemented security check for Secure Boot in Windows allows an authorized attacker to bypass a security feature locally.
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
A race condition in the Windows Clipboard Server allows an authorized attacker to elevate privileges locally.