CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.04)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-83693
CriticalEPSS 66%

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83578
CriticalEPSS 65%

Integer underflow vulnerability in Windows PowerShell allows an unauthorized attacker to execute code over a network.

CVE-2026-83519
CriticalEPSS 65%

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

CVE-2026-83517
CriticalEPSS 65%

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-75120
Critical

Vulnerability in the OpenText™ (EnCase SAFE Agents) component used by OpenText™ Endpoint Investigator, Endpoint Forensics & Response, Information Assurance, and Endpoint Security allows unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment.

CVE-2026-70300
CriticalEPSS 61%

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-70291
CriticalEPSS 62%

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVE-2026-70279
CriticalEPSS 58%

Improper neutralization of input during web page generation (cross-site scripting) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-70242
CriticalEPSS 63%

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVE-2026-70188
CriticalEPSS 57%

Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-70157
CriticalEPSS 65%

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.

CVE-2026-70153
CriticalEPSS 65%

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-70147
CriticalEPSS 65%

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-70096
CriticalEPSS 61%

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

CVE-2026-70024
CriticalEPSS 56%

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

CVE-2026-69886
CriticalEPSS 55%

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69883
CriticalEPSS 55%

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69705
CriticalEPSS 61%

Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69639
CriticalEPSS 61%

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-69634
CriticalEPSS 61%

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS