CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Microsoft browsers on Windows allows an attacker to execute arbitrary code in the context of the current user when JavaScript engines fail to render objects in memory.
A vulnerability in Microsoft browsers on Windows 7, Windows Server 2008 and R2, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user. The issue arises from flaws in JavaScript engines when handling objects in memory.
A vulnerability in Microsoft browsers on Windows 7, 8.1, 10, and Windows Server 2008, 2012, and 2016 allows an attacker to execute arbitrary code in the context of the current user. The issue arises from flaws in JavaScript engines when handling objects in memory.
A vulnerability in the JavaScript engine of Microsoft Edge allows an attacker to execute arbitrary code in the context of the current user when the engine improperly handles objects in memory.
A vulnerability in the JavaScript engine of Microsoft Edge allows an attacker to execute arbitrary code in the context of the current user. The issue occurs in Windows 10 and Windows Server 2016 when the engine improperly handles objects in memory.
Microsoft Edge in Windows 10 (1511, 1607, 1703) and Windows Server 2016 has a vulnerability that allows an attacker to execute arbitrary code in the context of the current user. The issue occurs when the JavaScript engine fails to properly handle objects in memory.
A vulnerability in the JavaScript engine of Microsoft Edge allows an attacker to execute arbitrary code in the context of the current user. The issue occurs in Windows 10 and Windows Server 2016 when the engine improperly handles objects in memory.
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to a flaw in the JavaScript engine that improperly handles objects in memory.
Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to a flaw in the JavaScript engine that improperly handles objects in memory.
A vulnerability in the JavaScript engine of Microsoft Edge allows an attacker to execute arbitrary code in the context of the current user when the engine improperly handles objects in memory.
Internet Explorer on Microsoft Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user due to improper access to objects in memory.
A vulnerability in Windows systems allows for elevation of privilege due to improper handling of objects in memory by the Windows Common Log File System (CLFS) driver. It affects multiple versions of Windows, including Windows 7, Windows 8.1, and Windows 10.
A vulnerability in Windows allows remote code execution due to improper handling of objects in memory by Windows Search. This affects multiple versions of Windows operating systems, including Windows 7, 8.1, and Windows 10.
Microsoft WordPad in Windows allows remote code execution due to improper parsing of specially crafted files. This affects multiple versions of Windows, including Windows 7, 8.1, 10, and Windows Server.
Microsoft .NET Framework versions 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resulting in denial of service.
Windows 10 version 1607 and Windows Server 2016 allow an attacker to execute code remotely via a specially crafted WiFi packet, known as 'HoloLens Remote Code Execution Vulnerability'.
Win32k in Microsoft Windows allows an elevation of privilege vulnerability due to improper handling of objects in memory. This affects multiple versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, Windows 10, and Windows Server 2016.
Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, known as 'Win32k Elevation of Privilege Vulnerability'.
Win32k in Microsoft Windows allows an elevation of privilege vulnerability due to improper handling of objects in memory. This affects multiple versions of Windows, including Windows 7, 8.1, 10, and Windows Server 2008 and 2016.
Win32k in Microsoft Windows allows an elevation of privilege vulnerability due to improper handling of objects in memory. This affects multiple versions of Windows, including Windows 7, 8.1, 10, and Windows Server 2008 and 2016.