CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Information disclosure vulnerability in Windows ActiveX Installer Service.
Elevation of privilege vulnerability in the Windows Graphics Component. Allows an attacker to gain elevated privileges on the system.
Remote code execution vulnerability in Windows Hyper-V. An attacker could exploit this flaw to execute arbitrary code on the host.
Elevation of privilege vulnerability in Windows Update Service. Allows an attacker to gain higher privileges on the system.
Elevation of privilege vulnerability in Windows Container Execution Agent. Allows an attacker to gain elevated privileges.
Elevation of privilege vulnerability in Windows Virtual Registry Provider.
Elevation of Privilege vulnerability in Windows Win32k. Details are not provided in the description.
Elevation of privilege vulnerability in Windows Installer. An attacker could exploit it to gain elevated privileges on the system.
Remote code execution vulnerability in the Windows Graphics Component. An attacker could exploit it to run arbitrary code on the affected system.
Vulnerability in the App-V Overlay Filter in Windows allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Information disclosure vulnerability in Microsoft Power BI. Allows an attacker to access sensitive data.
A memory corruption vulnerability in Internet Explorer that could allow remote code execution.
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run code on the affected system.
Remote code execution vulnerability in Microsoft Office. An attacker could exploit it to run arbitrary code on the affected system.
Information disclosure vulnerability in Windows Event Tracing.
Spoofing vulnerability in Microsoft SharePoint Server. Allows an attacker to impersonate a trusted source.
DirectX Elevation of Privilege Vulnerability
Elevation of privilege vulnerability in Windows Error Reporting. Allows a local attacker to gain elevated privileges.
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run arbitrary code in the context of the logged-in user.
Elevation of privilege vulnerability in Windows Update Stack Setup. An attacker could exploit it to gain elevated privileges on the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS