CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A heap-based buffer overflow in Adobe Flash Player allows attackers to elevate their integrity level from Low to Medium. This affects versions before 13.0.0.252 on Windows and OS X, and before 11.2.202.418 on Linux.
A heap-based buffer overflow vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute arbitrary code. This affects versions before 13.0.0.252 for Flash Player and before 15.0.0.356 for Adobe AIR.
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects various software versions on Windows, OS X, and Linux.
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X, as well as before 11.2.202.418 on Linux, and Adobe AIR versions before 15.0.0.356, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.
Adobe Flash Player and Adobe AIR in specific versions are vulnerable to arbitrary code execution or denial of service due to memory corruption. The issue affects versions before 13.0.0.252 for Flash Player and before 15.0.0.356 for Adobe AIR.
A double free vulnerability exists in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X, and before 11.2.202.418 on Linux. This vulnerability allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 13.0.0.252 and in versions 14.x and 15.x before 15.0.0.223 on Windows and OS X, as well as before 11.2.202.418 on Linux, and in Adobe AIR before 15.0.0.356, allows attackers to execute arbitrary code.
Microsoft Internet Explorer versions 6 through 10 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer versions 8 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 9 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website. This is a memory corruption vulnerability.
Microsoft Internet Explorer 11 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Microsoft Internet Explorer 9 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website. This is a memory corruption vulnerability.
Microsoft Internet Explorer versions 6 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2014-4143.
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Internet Explorer Memory Corruption Vulnerability.'
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Office document.
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
Podatność w OleAut32.dll w OLE w systemach Windows umożliwia zdalnym atakującym wykonanie dowolnego kodu poprzez specjalnie przygotowaną stronę internetową. Problem dotyczy nieprawidłowego przetwarzania wartości rozmiaru w funkcji SafeArrayDimen.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS