CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.04)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-70102
High

Use after free in the Windows Spaceport.sys driver. An authorized attacker can elevate privileges locally.

CVE-2026-70095
High

Heap-based buffer overflow in Windows iSCSI. An unauthorized attacker can execute code over a network.

CVE-2026-70093
High

Heap-based buffer overflow in the Windows Rich Text Edit Control. An authorized attacker can elevate privileges locally.

CVE-2026-70092
High

Heap-based buffer overflow in the Microsoft PostScript Printer Driver. An unauthorized attacker can elevate privileges locally.

CVE-2026-70089
HighEPSS 60%

Heap-based buffer overflow in Windows GDI. An unauthorized attacker can execute code over a network.

CVE-2026-70086
High

Use after free in the Microsoft Windows Search Component. An authorized attacker can elevate privileges locally.

CVE-2026-70082
HighEPSS 68%

Uncaught exception in Windows DNS. An unauthorized attacker can deny service over a network.

CVE-2026-70079
HighEPSS 66%

Improper enforcement of behavioral workflow in Windows DNS. An unauthorized attacker can deny service over a network.

CVE-2026-70076
High

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70069
HighEPSS 64%

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

CVE-2026-70068
HighEPSS 60%

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70067
High

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70066
High

Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-70064
High

Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-70062
HighEPSS 56%

Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-70060
High

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70059
High

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-70058
HighEPSS 71%

Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-70056
High

A use after free vulnerability exists in the Windows Update Service. An authorized attacker can exploit this flaw to elevate privileges locally.

CVE-2026-70054
High

A heap-based buffer overflow exists in Windows NetBIOS. An authorized attacker can exploit this flaw to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS