Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-97811 | high | 7.8 | No | Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-97809 | high | 7.8 | No | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-97808 | high | 7.0 | No | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-97807 | high | 7.8 | No | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-97806 | high | 7.8 | No | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-97805 | critical | 9.8 | No | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. | 2026-10-16 |
| CVE-2026-97804 | high | 7.8 | No | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-97798 | high | 7.8 | No | Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker... | 2026-10-16 |
| CVE-2026-97793 | high | 7.0 | No | Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-97339 | high | 7.2 | No | The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu... | 2026-10-16 |
| CVE-2026-96953 | high | 7.8 | No | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. | 2026-10-16 |
| CVE-2026-96952 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 2026-10-16 |
| CVE-2026-96950 | high | 7.8 | No | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96949 | high | 7.0 | No | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96948 | medium | 5.5 | No | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to... | 2026-10-16 |
| CVE-2026-96947 | high | 7.8 | No | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96946 | high | 7.8 | No | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96938 | medium | 6.7 | No | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96937 | high | 7.0 | No | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96243 | high | 7.8 | No | Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges... | 2026-10-16 |