CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The vulnerability in VP9 video extensions allows for information disclosure.
A vulnerability in Azure Active Directory allows for a security feature bypass, potentially leading to unauthorized access to resources.
A vulnerability in Azure Service Fabric on Windows allows for information disclosure. An attacker can exploit this flaw to gain access to sensitive data.
CVE-2023-35373 is a spoofing vulnerability in Mono Authenticode validation that may allow attackers to introduce false digital signatures.
A vulnerability in Windows Active Directory Certificate Services (AD CS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
A vulnerability in Active Directory Federation Service allows for security feature bypass, potentially leading to unauthorized access to resources. An attacker could exploit this flaw to gain access to systems that should be protected.
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to take control of the system.
A vulnerability in Microsoft DirectMusic allows for information disclosure, potentially leading to unauthorized access to user data.
A vulnerability in the MSHTML platform security feature in Windows allows for a security bypass. An attacker can exploit this flaw to perform unauthorized actions on the system.
A vulnerability in the Windows Remote Desktop Protocol allows for a security feature bypass. An attacker can exploit this flaw to gain unauthorized access to the system.
A vulnerability in Windows Local Security Authority (LSA) allows attackers to trigger a denial of service (DoS) by sending specially crafted requests. This can lead to the unavailability of security services in the system.
CVE-2023-35329 is a vulnerability in Windows authentication services that can be exploited to perform a Denial of Service (DoS) attack. An attacker can block access to the authentication service, leading to system downtime.
A vulnerability in Windows CDP User Components allows for information disclosure. An attacker can exploit this flaw to gain access to sensitive data.
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure. An attacker can exploit this flaw to gain access to sensitive data.
A vulnerability in Windows Deployment Services allows attackers to remotely trigger a fault, leading to denial of service. Exploiting this flaw may result in service unavailability for users.
A vulnerability in Remote Procedure Call Runtime allows for a remote Denial of Service (DoS) attack. An attacker can exploit this flaw to disrupt service availability.
A vulnerability in Remote Procedure Call Runtime allows attackers to perform remote procedure calls, leading to denial of service.
CVE-2023-35316 is a vulnerability related to information disclosure in Remote Procedure Call (RPC). It may allow attackers to access sensitive data that should not be publicly available.