CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-83884
Medium

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

CVE-2026-83875
Medium

An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally.

CVE-2026-83870
Medium

An out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.

CVE-2026-83865
Medium

Relative path traversal in Windows (wininet.dll) allows an authorized attacker to perform tampering locally.

CVE-2026-83864
Medium

Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-83854
Medium

Improper access control in Windows Notification allows an authorized attacker to disclose information locally.

CVE-2026-83849
Medium

Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.

CVE-2026-83835
MediumEPSS 59%

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.

CVE-2026-83798
Medium

Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.

CVE-2026-83794
Medium

Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.

CVE-2026-83788
Medium

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-83787
Medium

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-83786
MediumEPSS 53%

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-83776
Medium

An out-of-bounds read in the Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges through a physical attack.

CVE-2026-83774
Medium

Exposure of sensitive system information to an unauthorized control sphere in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-83773
MediumEPSS 61%

Exposure of sensitive system information to an unauthorized control sphere in the Windows MIDI Service Module allows an authorized attacker to disclose information locally.

CVE-2026-83766
Medium

Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.

CVE-2026-83765
Medium

An out-of-bounds read in the Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2026-83764
Medium

Incorrect authorization in the Windows Clipboard User Service allows an authorized attacker to disclose information locally.

CVE-2026-83760
Medium

An out-of-bounds read in the Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS