CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.19)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Windows Installer Elevation of Privilege Vulnerability. Details are not provided in the description, but it allows privilege escalation.
A vulnerability in Sitecore XP from version 7.5 to 8.2 Update-7 allows remote code execution through insecure deserialization. No authentication or special configuration is required to exploit this flaw.
A vulnerability in Apache HTTP Server allows a remote attacker to redirect requests via mod_proxy to an origin server of their choice using a crafted URI path. Affects versions 2.4.48 and earlier.
CVE-2021-40444 is a remote code execution vulnerability in the MSHTML engine of Internet Explorer, exploited via specially crafted Microsoft Office documents. An attacker creates a malicious ActiveX control, and the victim must open the document, leading to code execution.
Elevation of privilege vulnerability in Open Management Infrastructure. Could be exploited to gain elevated privileges.
An elevation of privilege vulnerability in Open Management Infrastructure (OMI).
Remote code execution vulnerability in Open Management Infrastructure (OMI). Allows a remote unauthenticated attacker to execute arbitrary code.
Remote code execution vulnerability in Microsoft Office Access Connectivity Engine. An attacker could exploit it to run malicious code on the victim's system.
Elevation of privilege vulnerability in Open Management Infrastructure. Could be exploited to gain elevated privileges.
Elevation of privilege vulnerability in Windows Common Log File System Driver. Could be exploited to gain elevated privileges.
An elevation of privilege vulnerability in the Windows Update Medic Service.
A spoofing vulnerability in Windows LSA (Local Security Authority).
An elevation of privilege vulnerability in Windows Event Tracing.
An elevation of privilege vulnerability in the Windows User Profile Service.
An elevation of privilege vulnerability exists due to overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker could run arbitrary code with SYSTEM privileges, install programs, view/change/delete data, or create new accounts with full user rights.
Memory corruption vulnerability in the scripting engine. It could allow remote code execution in the context of the logged-in user.
Elevation of privilege vulnerability in Microsoft Exchange Server. Allows an attacker to elevate their privileges in the system.
Remote code execution vulnerability in Microsoft Exchange Server. Allows an attacker to execute arbitrary code remotely on the server.
Elevation of privilege vulnerability in Windows Kernel. Could be exploited to gain administrative privileges.
Information disclosure vulnerability in Microsoft Exchange Server. Allows an attacker to access sensitive information.