CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Integer overflow vulnerability in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.
In ASP.NET Core, uncontrolled resource consumption allows an unauthorized attacker to perform a denial of service attack over a network.
A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
In Windows Collaborative Translation Framework, improper link resolution before file access ('link following') allows an authorized attacker to elevate privileges locally.
Code injection vulnerability in Microsoft Exchange Server. An unauthorized attacker can remotely execute code over the network.
Server-Side Request Forgery (SSRF) vulnerability in Microsoft Exchange Server. An authorized attacker can elevate privileges over a network.
Improper authorization vulnerability in Microsoft Exchange Server. An authorized attacker can exploit this vulnerability to disclose information over a network.
Improper authorization in .NET allows an authorized attacker to elevate privileges locally.
A TOCTOU race condition vulnerability in the Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Use-after-free vulnerability in Microsoft Office Word. An unauthorized attacker can exploit this flaw to execute code locally.
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
A path traversal vulnerability in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
A use-after-free vulnerability in the Linux MANA driver allows an authorized attacker to elevate privileges locally.
A heap-based buffer overflow vulnerability has been found in Microsoft Office. An unauthorized attacker can exploit this vulnerability to execute code locally.
Use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
An untrusted pointer dereference vulnerability has been found in Microsoft Office Word. An unauthorized attacker can exploit this vulnerability to execute code locally.
Integer underflow (wrap or wraparound) vulnerability in Microsoft Office Excel. An unauthorized attacker can exploit this flaw to execute code locally.
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.