CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.10)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
After Effects versions 26.0, 25.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
W systemie Windows Ancillary Function Driver for WinSock występuje podatność związana z dostępem do zasobów przy użyciu niekompatybilnego typu ('confusion type'), co pozwala autoryzowanemu atakującemu na lokalne podniesienie uprawnień.
The Windows Ancillary Function Driver for WinSock has a vulnerability related to resource access using an incompatible type ('type confusion'), allowing an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally.
There is a concurrent execution issue in Windows Print Spooler Components due to improper synchronization, leading to a race condition. This allows an authorized attacker to elevate privileges locally.
CVE-2026-34341 vulnerability involves a double free in the Windows Link-Layer Discovery Protocol (LLDP), allowing an authorized attacker to elevate privileges locally.
A use after free vulnerability in Windows Projected File System allows an authorized attacker to locally elevate privileges.
A use after free vulnerability in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Przepełnienie lub owinięcie liczb całkowitych w bibliotece DWM Core systemu Windows umożliwia autoryzowanemu atakującemu lokalne podniesienie uprawnień.
A race condition in Windows TCP/IP allows for concurrent execution using shared resources with improper synchronization. This enables an authorized attacker to elevate privileges locally.
A use after free vulnerability in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
A 'use after free' vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.