Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2019-10160 | critical | 9.8 | No | A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7... | 2026-10-14 |
| CVE-2018-18928 | critical | 9.8 | No | International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in... | 2026-10-14 |
| CVE-2017-7376 | critical | 9.8 | No | Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling... | 2026-10-14 |
| CVE-2017-7375 | critical | 9.8 | No | A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, D... | 2026-10-14 |
| CVE-2017-16931 | critical | 9.8 | No | parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference functio... | 2026-10-14 |
| CVE-2016-4658 | critical | 9.8 | No | xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other produ... | 2026-10-14 |
| CVE-2026-95680 | high | 8.0 | No | IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impers... | 2026-10-14 |
| CVE-2026-93907 | high | 8.1 | No | IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbou... | 2026-10-14 |
| CVE-2026-77910 | high | 8.8 | No | Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | 2026-10-14 |
| CVE-2026-70571 | high | 8.1 | No | Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. | 2026-10-14 |
| CVE-2026-70188 | critical | 9.1 | No | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a... | 2026-10-14 |
| CVE-2026-70183 | high | 7.5 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to... | 2026-10-14 |
| CVE-2026-70175 | high | 8.1 | No | Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. | 2026-10-14 |
| CVE-2026-53420 | high | 8.0 | No | Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via... | 2026-10-14 |
| CVE-2026-53418 | high | 8.1 | No | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user... | 2026-10-14 |
| CVE-2026-18537 | high | 8.7 | No | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an un... | 2026-10-14 |
| CVE-2026-18533 | medium | 6.5 | No | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an un... | 2026-10-14 |
| CVE-2026-18529 | high | 8.7 | No | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sani... | 2026-10-14 |
| CVE-2026-18513 | high | 7.2 | No | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schem... | 2026-10-14 |
| CVE-2026-109778 | high | 8.8 | No | Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Th... | 2026-10-14 |