CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A use-after-free vulnerability exists in Blink in Google Chrome prior to 89.0.4389.90. A remote attacker could potentially exploit heap corruption via a crafted HTML page.
Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any "Add" sections, such as Add Card Building & Floor, or others in the Name and Code Parameters.
Zidentyfikowano podatność w urządzeniach RUGGEDCOM RM1224, SCALANCE M-800, SCALANCE S615 oraz innych, która dotyczy przepełnienia bufora na stosie w obsłudze ramek STP BPDU. Może to umożliwić zdalnemu atakującemu wywołanie stanu odmowy usługi lub potencjalnie zdalne wykonanie kodu.
W urządzeniach PowerLogic ION8650, ION8800, ION7650, ION7700/73xx oraz ION83xx/84xx/85xx/8600 występuje podatność CWE-119: Niewłaściwe ograniczenie operacji w granicach bufora pamięci, która może spowodować restart licznika.
Internet Explorer Remote Code Execution Vulnerability. Details are not provided in the description, but it allows remote code execution.
Remote code execution vulnerability in Visual Studio Code Java Extension Pack. Allows an attacker to execute code in the context of the user who opens a malicious Java project.
Remote code execution vulnerability in Remote Development extension for Visual Studio Code. Allows an attacker to execute code in the context of the user who opens a malicious project.
Remote code execution vulnerability in Quantum Development Kit for Visual Studio Code. An attacker could exploit this vulnerability to execute code remotely in the user's context.
Remote code execution vulnerability in the ESLint extension for Visual Studio Code. An attacker could exploit it to run arbitrary code in the user's context.
Unsigned code execution vulnerability in Azure Sphere. An attacker could exploit this flaw to run unauthorized code.
Elevation of Privilege vulnerability in Windows Win32k. An attacker could exploit this vulnerability to gain elevated privileges on the system.
Remote Code Execution vulnerability in Microsoft SharePoint Server. Details are not provided in the description.
Information Disclosure vulnerability in Azure Virtual Machine. Could allow unauthorized access to data.
Unsigned code execution vulnerability in Azure Sphere.
Elevation of privilege vulnerability in Windows 10 Update Assistant. Allows an attacker to gain elevated privileges on the system.
A security feature bypass vulnerability in Windows Admin Center. It allows an attacker to bypass security mechanisms.
Denial of service vulnerability in Windows DNS Server. An attacker could exploit this vulnerability to cause the DNS service to become unavailable.
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run code on the affected system.
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run arbitrary code in the context of the logged-in user.
Remote code execution vulnerability in Visual Studio Code. Allows an attacker to execute arbitrary code on the victim's system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS