CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Microsoft Word and other Office products allows remote attackers to execute arbitrary code via a crafted document. This affects various versions of Word and Office on both Windows and Mac platforms.
Microsoft Office 2007 SP3 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted document, known as 'Microsoft Office Memory Corruption Vulnerability.'
Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted template.
A vulnerability in Microsoft Windows and applications related to TrueType font handling allows remote attackers to execute arbitrary code. This affects multiple versions of operating systems and components, including .NET Framework and Silverlight.
A vulnerability in Microsoft Windows and applications that allows remote attackers to execute arbitrary code via a crafted TrueType font. This affects multiple versions of operating systems and components, including .NET Framework and Silverlight.
The vulnerability in the ATMFD.DLL library in Windows allows remote attackers to execute arbitrary code via a crafted OpenType font. It affects multiple versions of Windows and the .NET Framework.
The Adobe Type Manager library in Windows has a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font. This is a different vulnerability than CVE-2015-2458 and CVE-2015-2459.
A vulnerability in the ATMFD.DLL library in Windows allows remote attackers to execute arbitrary code via a crafted OpenType font. This affects multiple versions of Windows and the .NET Framework.
The Adobe Type Manager library in Windows has a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font. This is a different vulnerability than CVE-2015-2458 and CVE-2015-2461.
The Adobe Type Manager library in Windows has a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font, known as 'OpenType Font Parsing Vulnerability'.
A vulnerability in Microsoft Windows and applications that allows remote attackers to execute arbitrary code via a crafted TrueType font. This affects multiple versions of operating systems and components, including .NET Framework and Silverlight.
A vulnerability in Microsoft Windows and applications that allows remote attackers to execute arbitrary code via a crafted TrueType font. This affects multiple versions of Windows operating systems and components such as .NET Framework and Silverlight.
A vulnerability in Microsoft Windows and applications that allows remote attackers to execute arbitrary code via a crafted TrueType font. This affects multiple versions of operating systems and Microsoft applications.
The Adobe Type Manager library in Windows contains a vulnerability that allows remote attackers to execute arbitrary code via a crafted OpenType font. This affects multiple versions of Windows, including Vista, 7, 8, and Server 2008 and 2012.
Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, and various versions of Lync allow remote attackers to execute arbitrary code via a crafted Office Graphics Library (OGL) font.
A vulnerability in Microsoft Windows allows attackers to bypass an application sandbox protection mechanism and perform unspecified filesystem actions via a crafted application.
A vulnerability in Microsoft Windows allows attackers to bypass an application sandbox protection mechanism and perform unspecified registry actions via a crafted application.
Microsoft Office 2007 SP3, 2010 SP2 i 2013 SP1 zawiera podatność, która pozwala zdalnym atakującym na wykonanie dowolnego kodu poprzez spreparowany dokument, znaną jako 'Podatność na uszkodzenie pamięci w Microsoft Office'.
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before version 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
Microsoft Internet Explorer versions 7 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.