CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-88169
MediumEPSS 57%

An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-88167
MediumEPSS 57%

A buffer over-read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-88162
Medium

Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.

CVE-2026-88158
Medium

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.

CVE-2026-88154
MediumEPSS 57%

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-88153
MediumEPSS 57%

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-88151
MediumEPSS 57%

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-88143
Medium

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-88140
Medium

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

CVE-2026-88137
MediumEPSS 61%

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

CVE-2026-88132
Medium

Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.

CVE-2026-88130
MediumEPSS 65%

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88129
MediumEPSS 65%

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88125
MediumEPSS 65%

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88123
MediumEPSS 65%

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88122
MediumEPSS 55%

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88099
MediumEPSS 57%

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

CVE-2026-87714
Medium

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.

CVE-2026-87709
Medium

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally. The vulnerability affects the integrity of protected resources.

CVE-2026-87698
Medium

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. The vulnerability may result in leakage of process memory data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS