CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.09)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-97826
MediumEPSS 55%

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97825
MediumEPSS 55%

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97824
MediumEPSS 55%

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97823
MediumEPSS 55%

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97822
MediumEPSS 54%

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97821
MediumEPSS 54%

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. The attacker can read data outside the intended memory bounds.

CVE-2026-97820
MediumEPSS 54%

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. The attacker can read data outside the intended memory bounds.

CVE-2026-97819
MediumEPSS 61%

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. The attacker can read data outside the intended memory bounds.

CVE-2026-97817
MediumEPSS 61%

Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. Overwriting heap memory may lead to data leakage.

CVE-2026-97816
CriticalEPSS 59%

OpenSSH for Windows is affected by a use after free vulnerability. This allows an unauthorized attacker to execute code over a network.

CVE-2026-97815
CriticalEPSS 52%

Windows Error Reporting is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.

CVE-2026-97814
CriticalEPSS 62%

Windows Text Shaping is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.

CVE-2026-97813
MediumEPSS 61%

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. Overwriting heap memory may lead to data leakage.

CVE-2026-97812
High

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97811
High

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-97810
High

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97809
High

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97808
High

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97807
High

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97806
High

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS