CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010 oraz inne aplikacje umożliwiają zdalne wykonanie kodu, gdy oprogramowanie nieprawidłowo obsługuje obiekty w pamięci. Dotyczy to również Word Viewer oraz różnych wersji Worda.
Microsoft Office 2016 Click-to-Run and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory.
The Microsoft Graphics Component in Windows has a vulnerability that allows for elevation of privilege through improper handling of objects in memory. This affects multiple versions of Windows, including Windows Server 2008 and 2016, as well as Windows 7, 8.1, and 10.
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory.
ChakraCore and Microsoft Edge in Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
A vulnerability in Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handle objects in memory.
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory.
ChakraCore and Microsoft Edge in Windows 10 (1511, 1607, 1703) and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory.
ChakraCore and Microsoft Edge in Windows 10 and Windows Server 2016 have a vulnerability that allows an attacker to execute arbitrary code in the context of the current user. The issue arises from how the scripting engine handles objects in memory.
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, as well as Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory.
ChakraCore and Microsoft Edge in Windows 10 and Windows Server 2016 have a vulnerability that allows an attacker to execute arbitrary code in the context of the current user. The issue arises from how the scripting engine handles objects in memory.
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
ChakraCore and Microsoft Edge in Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
ChakraCore and Microsoft Edge in Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
ChakraCore and Microsoft Edge in Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
ChakraCore and Microsoft Edge in Windows 10 and Windows Server 2016 have a vulnerability that allows an attacker to execute arbitrary code in the context of the current user. The issue arises from how the scripting engine handles objects in memory.
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, known as 'Scripting Engine Information Disclosure Vulnerability'.
Microsoft Edge in Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory.
ChakraCore and Microsoft Edge in Windows 10 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS