CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Windows Print Spooler allows remote code execution. An attacker could exploit it to run arbitrary code on the vulnerable system.
Cross-site scripting (XSS) vulnerability in Microsoft Dynamics Business Central. Allows injection of malicious script into the application.
A vulnerability in Windows 10 Update Assistant allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
A vulnerability in Azure CycleCloud allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges in the system.
A spoofing vulnerability in Windows LSA (Local Security Authority).
Remote code execution vulnerability in Microsoft Word. Opening a specially crafted document could allow an attacker to execute code.
Spoofing vulnerability in Microsoft SharePoint Server. Allows an attacker to impersonate another user or service.
Information disclosure vulnerability in the Windows Cryptographic Primitives Library. It may allow an attacker to access data that should be protected.
Remote code execution vulnerability in Windows Media MPEG-4 Video Decoder. Could allow an attacker to execute code in the context of the current user.
Vulnerability in Windows Print Spooler allows remote code execution. An attacker could exploit it to run arbitrary code on the vulnerable system.
Information disclosure vulnerability in the ONCRPC XDR driver of Windows Services for NFS. Could lead to data exposure.
Information disclosure vulnerability in the ONCRPC XDR driver of Windows Services for NFS. Could lead to data exposure.
Vulnerability in Windows Digital TV Tuner device registration application allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Information disclosure vulnerability in the ONCRPC XDR driver of Windows Services for NFS. Could lead to data exposure.
Elevation of privilege vulnerability in Windows Bluetooth Driver. An attacker could exploit it to gain elevated privileges.
Elevation of privilege vulnerability in the Windows Storage Spaces Controller. It allows a local attacker to gain elevated privileges.
Remote code execution vulnerability in Remote Desktop Client. An attacker could exploit this to execute code remotely on the client machine.
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit this flaw to run arbitrary code in the context of the logged-on user.
Remote code execution vulnerability in Windows Graphics Component during font parsing. An attacker could exploit it to execute code.
Information disclosure vulnerability in ASP.NET Core and Visual Studio. Could allow an attacker to read sensitive data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS