CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allows an attacker to execute arbitrary code in the context of the current user due to improper access to objects in memory.
Microsoft browsers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 have a vulnerability that allows an attacker to execute arbitrary code in the context of the current user. This issue occurs when JavaScript engines fail to render objects in memory.
A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory.
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
A remote code execution vulnerability exists in Microsoft Office due to improper parsing of specially crafted email messages.
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
A vulnerability in Microsoft Edge on Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to improper access to objects in memory.
The vulnerability in Microsoft Edge on Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to improper access to objects in memory.
A vulnerability in Microsoft Windows 10 and Windows Server 2016 allows a locally-authenticated attacker to run a specially crafted application on a targeted system. The issue occurs when Windows Secure Kernel Mode fails to properly handle objects in memory.
A vulnerability in Microsoft Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 allows an attacker to run processes in an elevated context due to improper handling of objects in memory by the Windows kernel.
The vulnerability in Windows Cursor allows improper elevation of privilege in various versions of Windows, including Windows 8.1, Windows Server 2012, and Windows 10. This could lead to unauthorized access to the system.
A vulnerability in Microsoft Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 allows an attacker to run processes in an elevated context due to improper handling of objects in memory by the Windows kernel.
Windows Shell w systemach Microsoft Windows, w tym Windows Server 2008 SP2, Windows 7 SP1, Windows 8, Windows 10 oraz innych, pozwala lokalnym użytkownikom lub zdalnym atakującym na wykonanie dowolnego kodu poprzez spreparowany plik .LNK. Problem występuje podczas wyświetlania ikon w Eksploratorze Windows lub innych aplikacjach przetwarzających ikony skrótów.
A vulnerability in Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allows information disclosure when a user opens a specially crafted PDF file.
A DCOM object in Helppane.exe in Microsoft Windows allows an authenticated attacker to run arbitrary code in another user's session when configured to run as the interactive user.