CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.16)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-97804
High

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

CVE-2026-97803
High

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-97801
High

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

CVE-2026-97800
High

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

CVE-2026-97799
High

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97798
HighEPSS 57%

Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-97794
High

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97793
High

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

CVE-2026-97792
High

Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97789
High

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-97788
HighEPSS 52%

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-97787
High

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97783
High

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-97781
HighEPSS 54%

Command injection vulnerability in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

CVE-2026-97780
HighEPSS 55%

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97778
High

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97777
HighEPSS 53%

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97776
HighEPSS 55%

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97775
HighEPSS 53%

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97774
High

Time-of-check time-of-use (TOCTOU) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS