CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-68776
Medium

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67648
Medium

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67645
Medium

Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67641
Medium

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.

CVE-2026-67633
MediumEPSS 55%

An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to cause a denial of service over a network.

CVE-2026-67630
MediumEPSS 61%

An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67629
MediumEPSS 61%

An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67624
MediumEPSS 61%

An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67393
MediumEPSS 53%

A buffer over-read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67390
MediumEPSS 60%

A buffer over-read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67389
MediumEPSS 52%

An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67386
MediumEPSS 52%

Use of an uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67383
MediumEPSS 60%

Generation of error messages containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67369
MediumEPSS 53%

An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-66816
MediumEPSS 52%

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.

CVE-2026-65812
MediumEPSS 58%

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.

CVE-2026-64918
MediumEPSS 59%

Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-62801
MediumEPSS 53%

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-62762
MediumEPSS 65%

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-58649
Medium

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS