CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-81387
Medium

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-81381
Medium

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

CVE-2026-81380
Medium

Command injection vulnerability in GitHub Copilot and Visual Studio Code. An unauthorized attacker can disclose information over a network.

CVE-2026-81377
MediumEPSS 53%

Path traversal vulnerability in Visual Studio Code. An unauthorized attacker can perform tampering over a network.

CVE-2026-80091
MediumEPSS 51%

Use of uninitialized resource in Microsoft Office. An unauthorized attacker can disclose information over a network.

CVE-2026-80090
MediumEPSS 51%

Out-of-bounds read in Microsoft Office Word. An unauthorized attacker can disclose information over a network.

CVE-2026-80089
MediumEPSS 59%

Out-of-bounds read in Microsoft Office. An unauthorized attacker can disclose information over a network.

CVE-2026-80088
MediumEPSS 59%

Out-of-bounds read in Microsoft Office Word. An unauthorized attacker can disclose information over a network.

CVE-2026-80087
MediumEPSS 51%

Heap-based buffer overflow in Microsoft Office. An unauthorized attacker can disclose information over a network.

CVE-2026-80086
MediumEPSS 51%

Out-of-bounds read in Microsoft Office PowerPoint. An unauthorized attacker can disclose information over a network.

CVE-2026-80084
MediumEPSS 51%

Out-of-bounds read in Microsoft Office Outlook. An unauthorized attacker can disclose information over a network.

CVE-2026-80082
MediumEPSS 51%

Out-of-bounds read in Microsoft Office. An unauthorized attacker can disclose information over a network.

CVE-2026-80079
MediumEPSS 58%

An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-80078
MediumEPSS 51%

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information over a network.

CVE-2026-80076
MediumEPSS 51%

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information over a network.

CVE-2026-80073
MediumEPSS 58%

An out-of-bounds read vulnerability in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

CVE-2026-79904
Medium

Photoshop Mobile is affected by a Path Traversal vulnerability that could result in a security feature bypass. A low-privileged attacker could access unauthorized files or directories outside intended restrictions. Exploitation depends on conditions beyond the attacker's control and requires user interaction (opening a malicious file).

CVE-2026-78523
MediumEPSS 61%

A use-after-free vulnerability in Windows DNS allows an unauthorized attacker to cause a denial of service over a network.

CVE-2026-78522
MediumEPSS 51%

An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-78520
MediumEPSS 52%

An out-of-bounds read vulnerability in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS