CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in the Windows Console Driver allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Spoofing vulnerability in Microsoft Visual Studio. Could allow an attacker to impersonate a trusted source.
A vulnerability in the .NET Runtime in Visual Studio Code allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Denial of service vulnerability in Bowser.sys driver. Could cause system crash.
Remote Code Execution vulnerability in Microsoft Dynamics 365 Business Central. An attacker could exploit this vulnerability to execute arbitrary code in the context of the application.
Remote code execution vulnerability in Microsoft Exchange Server. Allows an attacker to execute arbitrary code remotely on the server.
Elevation of privilege vulnerability in Microsoft Exchange Server. Allows an attacker to gain higher privileges.
Security feature bypass vulnerability in Microsoft Office. An attacker could bypass protection mechanisms.
Remote Code Execution vulnerability in Microsoft SharePoint Server. An attacker could exploit this vulnerability to execute arbitrary code on the server.
Denial of service vulnerability in Windows LSA. Could cause service failure.
Security feature bypass vulnerability in Windows LSA (Local Security Authority). An attacker could bypass security mechanisms.
Denial of service vulnerability in Windows AF_UNIX Socket Provider. Could cause system crash.
Elevation of privilege vulnerability in the Windows Cloud Files Mini Filter Driver. It allows a local attacker to gain elevated privileges.
Information disclosure vulnerability in Windows SMB. Could allow access to sensitive data transmitted over SMB.
Spoofing vulnerability in Windows Authenticode. An attacker could forge digital signatures, potentially leading to execution of unauthorized software as trusted.
Security feature bypass vulnerability in Azure AD. An attacker could bypass security mechanisms.
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit this vulnerability to execute arbitrary code in the context of the service.
Security feature bypass vulnerability in Active Directory Federation Services (AD FS). It allows an attacker to bypass security mechanisms.
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS