CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.29)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-69602
High

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.

CVE-2026-69601
HighEPSS 55%

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69600
High

Use after free in Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69599
High

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVE-2026-69598
HighEPSS 55%

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69597
High

Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.

CVE-2026-69594
High

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

CVE-2026-69593
High

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69592
High

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69589
High

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69588
HighEPSS 67%

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

CVE-2026-69587
HighEPSS 67%

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

CVE-2026-69585
High

Incorrect type conversion or cast in the Windows Search component allows an authorized attacker to elevate privileges locally.

CVE-2026-69584
High

Integer overflow or wraparound in the Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69583
High

Heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69582
High

Buffer over-read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69581
High

Use after free in the Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69580
High

Heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69578
High

Numeric truncation error in the Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-69576
High

Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS