CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.28)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-78444
High

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

CVE-2026-78442
High

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.

CVE-2026-78439
High

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-77909
HighEPSS 57%

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.

CVE-2026-77908
HighEPSS 61%

Improper control of code generation (code injection) in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

CVE-2026-77907
High

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2026-77906
HighEPSS 53%

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2026-77905
High

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-77904
High

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-77901
High

Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-77899
High

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.

CVE-2026-77898
High

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVE-2026-77897
High

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.

CVE-2026-77895
HighEPSS 66%

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-77894
High

A race condition in Windows Installer due to improper synchronization of shared resources allows an authorized attacker to elevate privileges locally.

CVE-2026-77893
HighEPSS 66%

An out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.

CVE-2026-77890
HighEPSS 66%

A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.

CVE-2026-77889
HighEPSS 66%

A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.

CVE-2026-77888
HighEPSS 66%

A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.

CVE-2026-77886
HighEPSS 66%

An out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS