CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.11)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Information disclosure vulnerability in the Windows Redirected Drive Buffering SubSystem driver. It may allow an attacker to read data they should not have access to.
A vulnerability in Windows BitLocker allows a security feature bypass. An attacker could exploit this flaw to bypass protection mechanisms.
Information disclosure vulnerability in Windows Ancillary Function Driver for WinSock. Could allow access to sensitive data.
A security feature bypass vulnerability in Windows Key Storage Provider allows an attacker to bypass key protection mechanisms. This could lead to unauthorized access to cryptographic keys and protected data.
Information disclosure vulnerability in Windows SMB. It may allow an attacker to access information that should be protected.
Information disclosure vulnerability in the Windows Redirected Drive Buffering SubSystem driver. It may allow an attacker to read data they should not have access to.
Information disclosure vulnerability in Windows Installer. Could allow an attacker to read sensitive data.
Denial of Service vulnerability in Windows Installer. Can lead to installation or system crashes.
Spoofing vulnerability in Windows Authenticode. Could allow an attacker to impersonate trusted software.
Information Disclosure vulnerability in Azure Sphere. Could allow an attacker to read data from memory.
Spoofing vulnerability in Visual Studio Code. An attacker could impersonate a trusted source, potentially leading to display of false information or tricking users into performing unwanted actions.
Spoofing vulnerability in Microsoft Edge for iOS. Could allow an attacker to impersonate trusted websites.
Spoofing vulnerability in Microsoft Edge for Android. Allows an attacker to impersonate trusted content.
Elevation of Privilege vulnerability in Microsoft Edge (Chromium-based). Could allow an attacker to gain elevated privileges.
Information disclosure vulnerability in Microsoft Edge for Android. Could allow access to sensitive data.
Elevation of privilege vulnerability in Microsoft Edge (Chromium-based). An attacker could exploit this flaw to gain elevated privileges on the system.
Podatność CVE-2021-22791 dotyczy błędu zapisu poza granicami (CWE-787) w kontrolerach Modicon PLC, który może prowadzić do awarii usługi podczas aktualizacji aplikacji kontrolera za pomocą specjalnie przygotowanego pliku projektu. Dotyczy to różnych modeli kontrolerów Modicon M580, M340, MC80, Momentum oraz symulatorów PLC.
Podatność CWE-125: Odczyt poza zakresem, która może spowodować Denial of Service na kontrolerze/symulatorze Modicon PLC podczas aktualizacji aplikacji kontrolera za pomocą specjalnie przygotowanego pliku projektu. Dotyczy to różnych modeli kontrolerów Modicon M580, M340, MC80, Momentum oraz symulatorów PLC dla EcoStruxure.
Występuje podatność CWE-119: Niewłaściwe ograniczenie operacji w granicach bufora pamięci, która może spowodować Denial of Service na kontrolerze/symulatorze Modicon PLC podczas aktualizacji aplikacji kontrolera za pomocą specjalnie przygotowanego pliku projektu. Dotyczy to różnych modeli kontrolerów Modicon M580, M340, MC80, Momentum Ethernet, Quantum oraz Premium, a także symulatorów PLC dla EcoStruxure.
WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the page management background, allowing attackers to steal cookies via a crafted payload in the search box.