CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The VMware Remote Console (VMRC) function in VMware vCloud Automation Center (vCAC) versions 6.0.1 through 6.1.1 allows remote authenticated users to gain privileges via vectors involving the 'Connect (by) Using VMRC' function.
CVE-2014-7192 describes a vulnerability in the syntax-error package before version 1.1.1, used in Node.js 0.10.x, allowing remote attackers to execute arbitrary code via a crafted file.
BIND versions 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 do not limit delegation chaining, allowing remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.
Microsoft Internet Explorer versions 6 through 8 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer 10 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka 'Internet Explorer Memory Corruption Vulnerability.'
A use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, 2013 Gold, SP1, and SP2, and 2013 RT Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document.
The vulnerability in vbscript.dll in Microsoft VBScript 5.6 through 5.8, used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website.
A vulnerability in Microsoft Excel allows remote attackers to execute arbitrary code via a crafted Office document. This affects Excel 2007 SP3, 2010 SP2, 2013 Gold and SP1, and Office Compatibility Pack.
Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
A use-after-free vulnerability in various versions of Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document.
Array index error in Microsoft Word 2007 SP3, Word 2010 SP2, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document.
Microsoft Internet Explorer 9 has a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website. This is a memory corruption vulnerability.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website. This is a memory corruption vulnerability.
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.