CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Elevation of privilege vulnerability in Windows Clipboard Service. An attacker who logs on can run a specially crafted application to execute arbitrary code in the security context of the local system, allowing installation of programs, data modification, or creation of accounts with full user rights.
Elevation of privilege vulnerability in Windows Clipboard Service. An attacker who logs on can run a specially crafted application to execute arbitrary code in the security context of the local system, allowing installation of programs, data modification, or creation of accounts with full user rights.
Elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context by running a specially crafted application.
Denial of service vulnerability in ASP.NET Core when improperly handling web requests. A remote unauthenticated attacker could send specially crafted requests, causing the application to become unavailable.
Elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context by running a specially crafted application.
Elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context by running a specially crafted application.
Elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context by running a specially crafted application.
Elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context by running a specially crafted application.
Elevation of privilege vulnerability in the Windows Common Log File System (CLFS) driver. An attacker who logs on can run a specially crafted application to run processes in an elevated context.
Remote code execution vulnerability in Microsoft Graphics Components when handling objects in memory. An attacker could execute arbitrary code on a target system if a user opens a specially crafted file.
Elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context by running a specially crafted application.
Memory corruption vulnerability in Windows Media Foundation due to improper handling of objects in memory. An attacker could install programs, view/change/delete data, or create new accounts with full user rights.
An elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could exploit it to run arbitrary code in an elevated context.
Information disclosure vulnerability in Windows Graphics Device Interface (GDI) due to improper handling of objects in memory. An attacker can retrieve information from the system, but the disclosure alone does not allow arbitrary code execution.
Elevation of privilege vulnerability in Windows State Repository Service due to improper handling of objects in memory. An attacker could run arbitrary code in an elevated context.
Elevation of privilege vulnerability in Windows kernel-mode driver. An attacker logged on to the system can run a specially crafted application to execute arbitrary code in kernel mode, potentially installing programs, modifying data, or creating accounts with full user rights.
Elevation of privilege vulnerability in the Windows Graphics Device Interface (GDI). An attacker who logs on can run a specially crafted application to execute arbitrary code in kernel mode, allowing installation of programs, data modification, or creation of accounts with full user rights.
Information disclosure vulnerability in Windows Graphics Device Interface (GDI) due to improper handling of objects in memory. An attacker can retrieve information from the system, but the disclosure alone does not allow arbitrary code execution.
An elevation of privilege vulnerability in DirectX due to improper handling of objects in memory. An attacker could run arbitrary code in kernel mode, then install programs, view, change or delete data, or create new accounts with full user rights.
An elevation of privilege vulnerability in Windows Runtime due to improper handling of objects in memory. An attacker could exploit it to run arbitrary code in an elevated context.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS