CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a heap-based buffer overflow vulnerability. This could allow arbitrary code execution in the context of the current user after opening a malicious file.
A vulnerability in Adobe Acrobat Reader (versions 24.001.30365, 26.001.21651 and earlier) is caused by an uncontrolled search path element, potentially allowing arbitrary code execution in the context of the current user. Requires user interaction (opening a malicious file).
ColdFusion versions 2023.19, 2025.8 and earlier are affected by a Path Traversal vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by default. Exploitation requires user interaction and the scope is changed.
A vulnerability in ColdFusion versions 2023.19, 2025.8 and earlier is caused by improper input validation, which could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this to execute arbitrary code. The component is restricted to an administrative network zone by default, and exploitation does not require user interaction.
Vulnerability in ColdFusion versions 2023.19, 2025.8 and earlier due to improper input validation. A low-privileged attacker can bypass security measures and gain unauthorized read and write access without user interaction.
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. The vulnerable component is restricted to an administrative network zone by default. Exploitation does not require user interaction and the scope is changed.
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability. This could allow arbitrary code execution in the context of the current user after opening a malicious file.
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability. This could allow arbitrary code execution in the context of the current user after opening a malicious file.
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could allow remote code execution in the context of the current user. User interaction is required – opening a malicious file.
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could allow remote code execution in the context of the current user. User interaction is required – opening a malicious file.
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could allow remote code execution in the context of the current user. User interaction is required – opening a malicious file.
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability. This could allow arbitrary code execution in the context of the current user after opening a malicious file.
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could allow remote code execution in the context of the current user. User interaction is required – opening a malicious file.
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction – opening a malicious file.
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction – opening a malicious file.
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction – opening a malicious file.
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in remote code execution in the context of the current user. Exploitation requires user interaction to open a malicious file.
UXSS vulnerability in Focus for iOS / Klar Webkit navigation. Fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1.
The image-size library up to version 2.0.2 contains a denial of service vulnerability via an infinite loop in JXL or HEIF parsers. A specially crafted image with a zero size field causes the Node.js event loop to hang permanently.
FlashArray Purity has a vulnerability due to insufficient filtering of certain data paths, which could expose sensitive information to an authenticated user with low privileges.