CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux are vulnerable to arbitrary code execution or denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
Microsoft Excel versions 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, known as 'Microsoft Office Memory Corruption Vulnerability.'
Microsoft Exchange Server 2013 and 2016 has an open redirect vulnerability that allows remote attackers to redirect users to arbitrary websites via a crafted URL.
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11 and various versions of Windows allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
A vulnerability in Microsoft Windows 10 Gold and 1511 allows attackers to cause a denial of service via unspecified vectors.
A vulnerability in Microsoft Windows allows remote authenticated users to execute arbitrary code by leveraging a domain account to make a crafted request.
Microsoft Silverlight 5 before version 5.1.50709.0 has a memory allocation issue in string-insert and string-append operations, which can lead to memory corruption.
Microsoft Excel and related services in various versions allow remote attackers to execute arbitrary code via a crafted document, known as 'Microsoft Office Memory Corruption Vulnerability'.
Microsoft Visio 2016 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted document, known as 'Microsoft Office Memory Corruption Vulnerability'.
Microsoft Excel versions 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, known as 'Microsoft Office Memory Corruption Vulnerability.'
A vulnerability in Microsoft Excel and related products allows remote attackers to execute arbitrary code via a crafted document. This affects multiple versions of Excel and services related to SharePoint and Office Online.
Microsoft Excel 2010 SP2 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted document, known as 'Microsoft Office Memory Corruption Vulnerability.'
Microsoft PowerPoint and other Office applications have a vulnerability that allows remote attackers to execute arbitrary code via a crafted document. This affects PowerPoint versions 2007, 2010, 2013, 2016 for Mac, and other Office components.
Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer have a vulnerability that allows remote attackers to execute arbitrary code via a crafted document, known as 'Microsoft Office Memory Corruption Vulnerability.'