CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
A stack-based buffer overflow vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.
A heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.
Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
A double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

