CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could use this issue to install a different revision on a repository, threatening data integrity. The issue is fixed in version 21.1.
An IDOR vulnerability in ICREM H8 SSRMS allows unauthorized access to sensitive information via the Print Invoice Functionality. Attackers can exploit this flaw to read data without proper permissions.
An elevation of privilege vulnerability in Visual Studio. Technical details are not provided in the description.
Spoofing vulnerability in Microsoft Exchange Server. An attacker can impersonate another entity, potentially leading to fraud or unauthorized actions.
Elevation of privilege vulnerability in Azure RTOS. Allows an attacker to gain higher privileges in the system.
Elevation of Privilege Vulnerability in Azure RTOS. An attacker could gain elevated privileges.
Elevation of privilege vulnerability in Azure RTOS. Similar to other flaws in this component, it may allow privilege escalation.
Tampering vulnerability in Azure Sphere. An attacker could modify data or software on Azure Sphere devices.
Security feature bypass vulnerability in Windows Hello. An attacker could bypass authentication mechanisms.
A Denial of Service vulnerability in Windows Hyper-V. An attacker could exploit this to cause crashes or unavailability of virtualization services.
Elevation of privilege vulnerability in Windows Feedback Hub.
A memory corruption vulnerability in the Chakra Scripting Engine.
Elevation of Privilege Vulnerability in Diagnostics Hub Standard Collector. An attacker could gain elevated privileges.
Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability.
Windows Installer Elevation of Privilege Vulnerability. Details are not provided in the description, but it allows privilege escalation.
Information Disclosure Vulnerability in Azure Sphere. An attacker could gain access to sensitive information.
Information disclosure vulnerability in Azure Sphere. Could allow an attacker to gain unauthorized access to data.
Information Disclosure Vulnerability in FSLogix. An attacker could gain access to sensitive information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS