CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Windows Graphics Component in various versions of Microsoft Office and other applications allows remote attackers to execute arbitrary code via a crafted web site.
The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote attackers to issue malicious requests via an integer overflow, leading to memory corruption.
The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 mishandles registry objects in memory, allowing local users to gain privileges via a crafted application.
A vulnerability in Microsoft Windows allows attackers with access to target systems to gain elevated privileges when Windows fails to properly validate buffer lengths.
Sterowniki w trybie jądra w Menedżerze Transakcji w systemach Microsoft Windows umożliwiają lokalnym użytkownikom uzyskanie podwyższonych uprawnień za pomocą specjalnie przygotowanej aplikacji. Dotyczy to wielu wersji systemów Windows, w tym Vista, 7, 8.1, 10 oraz serwerów Windows.
A DCOM object in Helppane.exe in Microsoft Windows 7 SP1, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application.
Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly validate vSMB packet data, allowing attackers to execute arbitrary code on a target OS.
CVE-2017-0094 is a remote code execution vulnerability in Microsoft scripting engines that improperly handle objects in memory. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current user.
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site. This vulnerability is different from those described in CVE-2017-0072, CVE-2017-0083, CVE-2017-0084, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088, and CVE-2017-0089.
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site. This is a remote code execution vulnerability.
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site.
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site. This is a remote code execution vulnerability.
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site. This is a remote code execution vulnerability.
A vulnerability in Uniscribe in Windows allows remote attackers to execute arbitrary code via a crafted website. This affects multiple versions of Windows, including Vista, 7, 8.1, 10, and Windows Server.
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site. This is a remote code execution vulnerability.
Kernel-mode drivers in Microsoft Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
Kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
Kernel-mode drivers in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
Kernel-mode drivers in Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
Kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'