CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document. This affects various versions of Word and Word Automation Services on SharePoint.
A vulnerability in Microsoft Word and related products allows remote attackers to execute arbitrary code via a crafted Office document. This affects Word versions 2007, 2010, 2013, and Word for Mac.
Microsoft Outlook 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
The JScript 9, VBScript, and Chakra JavaScript engines in Microsoft Internet Explorer 11, Microsoft Edge, and other products allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
The JScript 9, VBScript, and Chakra JavaScript engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
A vulnerability in Microsoft .NET Framework allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference. This affects versions 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1.
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
Kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
The JScript 9, VBScript, and Chakra JavaScript engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Microsoft Edge Memory Corruption Vulnerability.'
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-3240 and CVE-2016-3242.
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
The Print Spooler service in Microsoft Windows allows local users to gain elevated privileges through filesystem write operations. This affects multiple versions of Windows, including Vista, 7, 8.1, and 10.