CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.
Uncontrolled resource consumption in HTTP/2 allows an unauthenticated attacker to perform a denial-of-service (DoS) attack over the network.
The Windows Kernel contains a Use After Free vulnerability that allows an authorized attacker to elevate privileges locally.
Windows Secure Boot has an improper access control vulnerability that allows an authorized attacker to elevate privileges locally.
A vulnerability in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
Heap-based buffer overflow vulnerability in Windows Media. An unauthorized attacker can exploit this vulnerability to execute code locally.
A vulnerability in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
A vulnerability in Visual Studio Code due to improper input validation allows an unauthorized attacker to bypass a security feature locally.
A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
Windows Narrator Braille has an untrusted search path vulnerability that allows an authorized attacker to elevate privileges locally.
Use After Free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code remotely.
A protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.
Use After Free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code remotely.
Use-After-Free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code remotely.
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
Untrusted search path vulnerability in Windows Storage allows an authorized attacker to elevate privileges locally.
Microsoft Office contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.