CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have an unquoted search path vulnerability.
Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnerability when parsing malicious PCX files. Successful exploitation could lead to arbitrary code execution.
Adobe Campaign versions up to Build 8770 have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database.
Występuje podatność na podniesienie uprawnień, gdy Internet Explorer nieprawidłowo egzekwuje zasady dotyczące domen, co może pozwolić atakującemu na dostęp do informacji z jednej domeny i wstrzyknięcie ich do innej domeny.
A remote code execution vulnerability exists in Microsoft Edge due to improper access to objects in memory. This could corrupt memory in such a way that allows an attacker to execute arbitrary code in the context of the current user.
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. This vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.
A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines render when handling objects in memory. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current user.
A remote code execution vulnerability exists in Microsoft Edge due to improper access to objects in memory. This could corrupt memory in a way that allows an attacker to execute arbitrary code in the context of the current user.
Podatność CVE-2017-0199 dotyczy różnych wersji Microsoft Office oraz systemów Windows, które pozwalają zdalnym atakującym na wykonanie dowolnego kodu poprzez spreparowany dokument. Problem ten występuje w Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2016 oraz w systemach Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1 i Windows 8.1.
Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, known as 'Microsoft Office DLL Loading Vulnerability.'
A privilege escalation vulnerability exists in Windows 10 due to improper handling of objects in memory by the Windows kernel-mode driver. An attacker who successfully exploits this vulnerability could run arbitrary code in kernel mode.
A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10 or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system.
A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system.
A privilege escalation vulnerability exists in Windows due to improper calculation of LDAP request buffer lengths. An attacker could exploit this vulnerability by sending malicious traffic to a Domain Controller using a specially crafted application.
An elevation of privilege vulnerability exists in Microsoft Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 due to improper sanitization of handles in memory.
A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system.
A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 fails to properly validate input from an authenticated user on a guest operating system.
Microsoft .NET Framework versions 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 allows an attacker with access to the local system to execute malicious code, known as '.NET Remote Code Execution Vulnerability.'
An elevation of privilege vulnerability exists in Microsoft Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 due to improper sanitization of handles in memory by the scripting engine.
An elevation of privilege vulnerability exists in Windows 7, 8.1, RT 8.1, 10, and Windows Server 2008 R2, 2012, 2012 R2, and 2016 due to improper handling of objects in memory by the Microsoft Graphics Component.