CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In Zoom clients before version 5.14.10, there is a client-side enforcement issue of server-side security that may allow a privileged user to enable information disclosure via network access.
Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access.
A vulnerability in Microsoft Message Queuing (MSMQ) allows attackers to remotely trigger a fault, leading to denial of service. Exploiting this flaw may cause the MSMQ service to stop responding to requests.
A vulnerability in Azure Apache Hadoop allows attackers to spoof other services, potentially leading to unauthorized access to data.
A vulnerability in the Windows Smart Card Resource Management Server allows for a security feature bypass. An attacker could exploit this flaw to gain access to functions that should be protected.
A vulnerability in Microsoft Message Queuing allows for information disclosure, potentially leading to unauthorized access to data.
A vulnerability in Microsoft Message Queuing (MSMQ) allows attackers to remotely trigger an error, leading to denial of service. Exploiting this flaw may result in service disruption of MSMQ.
A vulnerability in Windows Hyper-V allows for information disclosure, potentially leading to unauthorized access to data.
A vulnerability in Windows Cryptographic Services may lead to information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
A vulnerability in Windows Cryptographic Services allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
The vulnerability in the Windows Wireless Wide Area Network Service (WwanSvc) allows for information disclosure. An attacker can exploit this flaw to gain access to sensitive system data.
A vulnerability in Microsoft SharePoint Server allows for information disclosure, potentially leading to unauthorized access to sensitive data.
A vulnerability in Microsoft Outlook allows for spoofing, potentially leading to false email messages. An attacker can exploit this flaw to impersonate another user.
A vulnerability in Microsoft SharePoint Server allows for information disclosure, potentially leading to unauthorized access to sensitive data.
A vulnerability in the Windows Group Policy security feature allows for security mechanism bypass. This could lead to unauthorized access to system resources.
A vulnerability in Azure Apache Ambari allows attackers to spoof users. As a result, unauthorized users may gain access to system resources.
A vulnerability in Azure Apache Oozie allows attackers to spoof users, potentially leading to unauthorized access to resources.
A vulnerability in Azure DevOps Server allows attackers to spoof users, potentially leading to unauthorized access to resources.
Buffer overflow in Zoom Clients before version 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.
A vulnerability in Azure HDInsight related to Jupyter Notebook allows spoofing, which may lead to unauthorized access to user data.