CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server due to improper handling of objects in memory.
A remote code execution vulnerability exists in Microsoft PowerPoint and SharePoint when they fail to properly handle objects in memory. This affects multiple versions of PowerPoint and SharePoint.
Internet Explorer and Microsoft Edge in various versions of Windows allow an attacker to execute arbitrary code in the context of the current user due to a flaw in the JavaScript engine. The issue relates to the rendering of objects in memory.
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way the Microsoft Edge scripting engine handles objects in memory.
Microsoft Edge in Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way the Microsoft Edge scripting engine handles objects in memory.
The PDF library in Microsoft Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way the library handles objects in memory.
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft Edge accesses objects in memory.
Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft Edge accesses objects in memory.
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way the Microsoft Edge scripting engine handles objects in memory.
The PDF library in Microsoft Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 allows an attacker to execute arbitrary code in the context of the current user. The issue arises from improper handling of objects in memory by this library.
A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 due to improper handling of objects in memory.
The vulnerability in the Microsoft Windows graphics component allows for elevation of privilege when the Win32k component fails to properly handle objects in memory. This affects multiple versions of Windows, including Windows Server 2008 and 2016, as well as Windows 7, 8.1, and 10.
The Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1607, and Windows Server 2016 has a vulnerability allowing remote code execution when it fails to properly validate input from an authenticated user on a guest operating system.
A vulnerability in Windows Error Reporting (WER) in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality due to the way WER handles and executes files.
Windows Shell in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to run arbitrary code in the context of the current user due to improper validation of file copy destinations.
A vulnerability in Windows Uniscribe allows an attacker to execute code remotely via a specially crafted website or document, potentially leading to serious security breaches.
The Uniscribe component in Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 has a vulnerability that allows remote code execution due to improper handling of objects in memory.
The DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 contains a vulnerability that allows an attacker to run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresponsive due to a memory corruption issue.
A vulnerability in Windows graphics across various Microsoft operating system versions and Microsoft Office allows an attacker to execute remote code through improper handling of embedded fonts.
A vulnerability in the Windows Kernel-Mode Drivers component allows for elevation of privilege when the Win32k component fails to properly handle objects in memory. This affects multiple versions of Windows, including Windows Server 2008 and Windows 10.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS