CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Remote code execution vulnerability in the Windows Graphics Component. An attacker could exploit this flaw to execute arbitrary code in the context of the logged-on user.
Remote code execution vulnerability in Microsoft Dynamics 365 On-Premises. An attacker could exploit this flaw to execute code remotely.
Windows Event Tracing Elevation of Privilege Vulnerability.
An elevation of privilege vulnerability in Windows Event Tracing.
An information disclosure vulnerability in .NET Core and Visual Studio allows an attacker to gain access to sensitive data. The flaw could be exploited to read information that should be protected.
An elevation of privilege vulnerability in the Windows User Profile Service.
Vulnerability in Windows Print Spooler allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
A memory corruption vulnerability in the Scripting Engine in Microsoft systems. Technical details are not available in the description.
Microsoft Office Remote Code Execution Vulnerability. Details not available in the description.
Elevation of privilege vulnerability in Microsoft Defender. An attacker could exploit it to gain elevated privileges.
Elevation of privilege vulnerability in Azure CycleCloud. An attacker could exploit it to gain higher privileges in the CycleCloud environment.
Information disclosure vulnerability in Windows Services for NFS ONCRPC XDR driver. An attacker could access sensitive data.
Remote code execution vulnerability in the Windows Services for NFS ONCRPC XDR driver. It could allow an attacker to execute code in the kernel context.
Vulnerability in Windows Recovery Environment Agent allows elevation of privilege. Attacker can gain higher privileges in the system.
A vulnerability in Azure Sphere allows a denial of service (DoS) attack. An attacker could exploit this flaw to disrupt the service.
Elevation of privilege vulnerability in Azure Sphere. An attacker could exploit it to gain higher privileges on the system.
A vulnerability in Azure Sphere allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
Elevation of privilege vulnerability in the Windows User Account Profile Picture feature. It allows a local attacker to elevate privileges.
Elevation of Privilege vulnerability in Windows Event Tracing. Allows an attacker to gain higher privileges.
Remote code execution vulnerability in Windows TCP/IP stack. It could allow an attacker to execute arbitrary code in the context of the kernel.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

