CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.22)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Microsoft Office and related products allows remote code execution when the software fails to properly handle objects in memory. This affects multiple versions of Office and SharePoint.
The Microsoft Server Message Block 1.0 (SMBv1) server on various Windows systems allows an attacker to execute remote code by improperly handling certain requests.
The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it handles certain requests.
The vulnerability in Microsoft Server Message Block 1.0 (SMBv1) allows an attacker to execute remote code by improperly handling certain requests. This affects multiple versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, Windows 10, and Windows Server 2016.
The Microsoft Server Message Block 1.0 (SMBv1) server on various Windows systems allows an attacker to execute remote code by improperly handling certain requests.
A remote code execution vulnerability exists in Microsoft Edge related to how affected Microsoft scripting engines render objects in memory.
Microsoft PowerPoint for Mac 2011 has a remote code execution vulnerability when the software fails to properly handle objects in memory, known as 'Microsoft Office Memory Corruption Vulnerability'.
Microsoft PowerPoint for Mac 2011 has a remote code execution vulnerability when the software fails to properly handle objects in memory, known as 'Microsoft Office Memory Corruption Vulnerability'.
Sterowniki w trybie jądra w systemach Microsoft Windows Server 2008 SP2 i R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold i R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 oraz Windows Server 2016 umożliwiają lokalnym użytkownikom uzyskanie uprawnień za pomocą spreparowanej aplikacji. Jest to znane jako 'Podatność na podniesienie uprawnień Win32k'.
Microsoft Office 2010 SP2, Office 2013 SP1 oraz Office 2016 mają podatność na zdalne wykonanie kodu, gdy oprogramowanie nieprawidłowo obsługuje obiekty w pamięci. Jest to znane jako 'Podatność na zdalne wykonanie kodu w Office'.
Microsoft Office 2010 SP2, Office 2013 SP1 oraz Office 2016 mają podatność na zdalne wykonanie kodu, gdy oprogramowanie nieprawidłowo obsługuje obiekty w pamięci. Jest to znane jako 'Podatność na zdalne wykonanie kodu w Office'.
Microsoft Word and other Office applications have a vulnerability that allows remote code execution when the software fails to properly handle objects in memory. This affects multiple versions of Office, including Word 2007, 2010, 2013, and Office for Mac.
An elevation of privilege vulnerability exists when ASP.NET Core fails to properly sanitize web requests.
The vulnerability in Microsoft .NET Framework allows an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use.
A denial of service vulnerability exists in ASP.NET Core due to improper validation of web requests. Attackers can exploit a flaw in the TextEncoder.EncodeCore function, leading to denial of service.
The Graphics Component in kernel-mode drivers in various versions of Windows allows local users to gain elevated privileges via a crafted application. In Windows 7 on x64-based systems and later, it may also lead to denial of service.
A remote code execution vulnerability exists in Microsoft Edge related to the way affected Microsoft scripting engines render when handling objects in memory, known as 'Microsoft Edge Memory Corruption Vulnerability.'
A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'
A remote code execution vulnerability exists in Microsoft Edge related to the Chakra JavaScript engine's handling of objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'
A remote code execution vulnerability exists in Microsoft Edge related to how the Chakra JavaScript engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'