CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, and in Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code.
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, and Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.18, and Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
A heap-based buffer overflow in Adobe Reader and Acrobat before version 11.0.18, and in Acrobat and Acrobat Reader DC Classic before version 15.006.30243, as well as in Acrobat and Acrobat Reader DC Continuous before version 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, and Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code.
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, and Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code.
Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to modify files, rename files, create directories, or delete directories via crafted packets.
A use-after-free vulnerability in the __sys_recvmmsg function in the Linux kernel before version 4.5.2 allows remote attackers to execute arbitrary code via mishandled error processing during a recvmmsg system call.
A vulnerability in the Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a large negative value for the data length.
A vulnerability in the Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted visualizer data length.
A vulnerability in the Qualcomm QDSP6v2 driver in Android before October 5, 2016, allows attackers to cause a denial of service or possibly have unspecified other impact via crafted parameter data.
The Qualcomm QDSP6v2 driver in Android before 2016-10-05 has a vulnerability that allows attackers to cause a denial of service or possibly have unspecified other impact via an invalid data length.
The Qualcomm MDSS driver in Android before 2016-10-05 has a vulnerability that allows attackers to cause a denial of service through invalid pointer access. It may also lead to unspecified other impacts.
The gbk2utf module in Qualcomm Wi-Fi in Android before 2016-10-05 allows remote attackers to cause a framework crash or possibly have unspecified other impact via an access point with a malformed SSID with GBK encoding.
The QDSP6v2 Voice Service driver for Linux kernel 3.x has a vulnerability that allows attackers to cause a denial of service through memory corruption or potentially other unspecified impacts. This issue is demonstrated by a buffer overflow in the voice_svc_send_req function.
Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices. The impact and attack vectors are unknown.
Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices. The impact and attack vectors are unknown.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

