CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.27)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2021-38647
CriticalActively exploitedEPSS 100%

Remote code execution vulnerability in Open Management Infrastructure (OMI). Allows a remote unauthenticated attacker to execute arbitrary code.

CVE-2021-38646
HighActively exploitedEPSS 94%

Remote code execution vulnerability in Microsoft Office Access Connectivity Engine. An attacker could exploit it to run malicious code on the victim's system.

CVE-2021-38645
HighActively exploitedEPSS 85%

Elevation of privilege vulnerability in Open Management Infrastructure. Could be exploited to gain elevated privileges.

CVE-2021-38644
HighEPSS 80%

Remote code execution vulnerability in Microsoft MPEG-2 Video Extension. An attacker could exploit it to execute arbitrary code on the victim's system.

CVE-2021-38639
HighEPSS 66%

Elevation of privilege vulnerability in Win32k. A local attacker could exploit it to gain higher privileges on the system.

CVE-2021-38638
High

Elevation of privilege vulnerability in Windows Ancillary Function Driver for WinSock. An attacker could exploit it to gain higher privileges on the system.

CVE-2021-38637
MediumEPSS 52%

Information Disclosure vulnerability in Windows Storage. Could allow an attacker to read data from memory.

CVE-2021-38636
MediumEPSS 52%

Information disclosure vulnerability in the Windows Redirected Drive Buffering SubSystem driver. It may allow an attacker to read data they should not have access to.

CVE-2021-38635
MediumEPSS 52%

Information disclosure vulnerability in the Windows Redirected Drive Buffering SubSystem driver. It may allow an attacker to read data they should not have access to.

CVE-2021-38634
HighEPSS 54%

Elevation of Privilege vulnerability in Windows Update Client. Allows an attacker to gain elevated privileges on the system.

CVE-2021-38633
HighEPSS 56%

Vulnerability in Windows Common Log File System Driver allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.

CVE-2021-38632
Medium

A vulnerability in Windows BitLocker allows a security feature bypass. An attacker could exploit this flaw to bypass protection mechanisms.

CVE-2021-38630
High

Elevation of privilege vulnerability in Windows Event Tracing. An attacker could exploit it to gain higher privileges on the system.

CVE-2021-38629
MediumEPSS 83%

Information disclosure vulnerability in Windows Ancillary Function Driver for WinSock. Could allow access to sensitive data.

CVE-2021-38628
High

Vulnerability in Windows Ancillary Function Driver for WinSock allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.

CVE-2021-38626
High

Vulnerability in Windows Kernel allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.

CVE-2021-38625
High

Vulnerability in Windows Kernel allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.

CVE-2021-38624
MediumEPSS 70%

A security feature bypass vulnerability in Windows Key Storage Provider allows an attacker to bypass key protection mechanisms. This could lead to unauthorized access to cryptographic keys and protected data.

CVE-2021-36975
HighEPSS 66%

Elevation of privilege vulnerability in Win32k. A local attacker could exploit it to gain higher privileges on the system.

CVE-2021-36974
High

Vulnerability in Windows SMB allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS