CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in the Windows Print Spooler service allows elevation of privilege.
CVE-2021-40444 is a remote code execution vulnerability in the MSHTML engine of Internet Explorer, exploited via specially crafted Microsoft Office documents. An attacker creates a malicious ActiveX control, and the victim must open the document, leading to code execution.
Cross-site scripting (XSS) vulnerability in Microsoft Dynamics Business Central. Allows injection of malicious script into the application.
A vulnerability in the Windows Print Spooler allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Tampering vulnerability in Microsoft Edge (Chromium-based). Could allow modification of browser data or behavior.
A vulnerability in the Windows Print Spooler allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
Remote code execution vulnerability in Microsoft Office Graphics. An attacker could exploit this flaw to execute code on the victim's system.
Vulnerability in Microsoft Office Graphics allows remote code execution. An attacker could exploit it to run arbitrary code on the victim's system.
Remote code execution vulnerability in Microsoft Office Graphics. An attacker could exploit it to run arbitrary code in the context of the logged-in user.
Information Disclosure vulnerability in Microsoft Office Graphics Component. Could allow an attacker to read data from memory.
Vulnerability in Microsoft Word allows remote code execution. An attacker could exploit it to run arbitrary code on the victim's system.
Vulnerability in Microsoft Excel allows remote code execution. An attacker could exploit it to run arbitrary code on the victim's system.
Remote code execution vulnerability in Microsoft Office Visio. It could allow an attacker to execute code on the victim's system.
Remote code execution vulnerability in Microsoft Office Visio. Similar to other Visio flaws, it could allow an attacker to run code.
Spoofing vulnerability in Microsoft SharePoint Server. An attacker could impersonate a trusted source, potentially leading to fraud or unauthorized actions.
Spoofing vulnerability in Microsoft SharePoint Server. An attacker could impersonate a trusted source, potentially leading to fraud or unauthorized actions.
Spoofing vulnerability in Microsoft Office. Could allow an attacker to impersonate trusted sources.
Elevation of privilege vulnerability in Open Management Infrastructure. Could be exploited to gain elevated privileges.
An elevation of privilege vulnerability in Open Management Infrastructure (OMI).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS