CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.04)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-83675
High

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83674
HighEPSS 54%

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-83670
HighEPSS 65%

Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.

CVE-2026-83669
High

Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83666
High

Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

CVE-2026-83665
HighEPSS 71%

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-83659
High

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83655
HighEPSS 71%

Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.

CVE-2026-83654
High

Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-83652
High

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83650
High

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-83647
HighEPSS 70%

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.

CVE-2026-83645
HighEPSS 69%

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

CVE-2026-83644
High

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83643
HighEPSS 60%

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83642
HighEPSS 57%

Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-83641
High

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-83640
High

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-83639
High

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83638
High

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS