CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Hyper-V vulnerability in Microsoft Windows allows guest OS users to execute arbitrary code on the host OS via a crafted application. It affects multiple versions of Windows, including Windows 7, 8.1, and Windows 10.
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site. This is a remote code execution vulnerability.
CVE-2017-0071 is a remote code execution vulnerability in Microsoft scripting engines that can lead to memory corruption. An attacker who successfully exploits this vulnerability could gain user rights, allowing full control over the system if the current user has administrative privileges.
CVE-2017-0070 is a remote code execution vulnerability in Microsoft scripting engines that improperly handle objects in memory. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current user.
CVE-2017-0067 is a remote code execution vulnerability in Microsoft scripting engines that improperly handle objects in memory. An attacker who successfully exploits this vulnerability could gain user rights, and if the current user has administrative rights, they could take full control of the affected system.
Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site (Information Disclosure). This vulnerability is different from CVE-2017-0008 and CVE-2017-0009.
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
A vulnerability in Microsoft Office and Word allows remote attackers to execute arbitrary code or cause a denial of service through a crafted document. This affects multiple versions of Office and Word.
The vulnerability in Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service through a crafted document. This is a memory corruption issue.
The kernel API in Microsoft Windows improperly enforces permissions, allowing local users to spoof processes, spoof inter-process communication, or cause a denial of service via a crafted application.
A vulnerability in the GDI interface of Windows allows local users to gain elevated privileges through a crafted application. This affects multiple versions of Windows, including Vista, 7, 8.1, and 10.
The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
A vulnerability in Microsoft Windows Vista SP2 and Server 2008 SP2 related to improper dynamic link library (DLL) loading allows local users to gain privileges via a crafted application.
CVE-2017-0035 is a remote code execution vulnerability in Microsoft scripting engines that can lead to unauthorized access to the system. An attacker who successfully exploits this vulnerability can gain user rights, allowing full control if the account is administrative.
A remote code execution vulnerability exists in Microsoft Edge due to improper access to objects in memory. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current user.
CVE-2017-0032 is a remote code execution vulnerability in Microsoft scripting engines that can lead to unauthorized access to the system. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current user.
The vulnerability in Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document.
The vulnerability in Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation Services on SharePoint Server 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document.
Kernel-mode drivers in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application. This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082.
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'