CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.11)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
Information disclosure vulnerability in the Windows Remote Access Connection Manager. It may allow an attacker to access information that should be protected.
A spoofing vulnerability in Microsoft Office Online Server allows an attacker to impersonate a trusted resource or user. Exploitation could lead to tricking users and disclosing sensitive information.
Memory corruption vulnerability in the scripting engine. It could allow remote code execution in the context of the logged-in user.
A remote code execution vulnerability in the Windows MSHTML platform allows an attacker to execute arbitrary code in the context of the logged-on user. The attack can be carried out via a specially crafted web page or document.
Denial of Service (DoS) vulnerability in Windows DNS Server. An attacker could exploit this flaw to cause the DNS service to crash, preventing name resolution.
Information disclosure vulnerability in GDI+ on Windows. It may allow an attacker to access data that should be protected.
Information disclosure vulnerability in Microsoft SharePoint Server. An attacker could exploit this flaw to gain access to information that should be protected.
A spoofing vulnerability in Microsoft SharePoint Server allows an attacker to impersonate a trusted resource or user. Exploitation could lead to tricking users and disclosing sensitive information.
Information Disclosure vulnerability in Storage Spaces Controller. Could allow an attacker to read data from memory.
Information disclosure vulnerability in Windows Remote Assistance. An attacker could exploit this flaw to access information that should not be disclosed.
Information disclosure vulnerability in the Windows kernel. An attacker could read kernel memory, potentially exposing sensitive data.
Denial of service vulnerability in Windows DNS Server. Could allow disruption of DNS services.
Remote code execution vulnerability in Windows MSHTML platform. An attacker could exploit this flaw to run arbitrary code in the context of the logged-on user.
Information disclosure vulnerability in Windows GDI. An attacker could read memory data, potentially exposing sensitive information.
A vulnerability in the Windows Partition Management Driver allows elevation of privilege.
Information Disclosure vulnerability in Win32k. Could allow an attacker to read data from system memory.
Information disclosure vulnerability in Windows SMB. Could allow access to sensitive data transmitted over SMB.
Spoofing vulnerability in Windows Authenticode. An attacker could forge digital signatures, potentially leading to execution of unauthorized software as trusted.
A vulnerability in Windows Installer allows spoofing. An attacker could exploit this flaw to impersonate a trusted source.