Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92573 | medium | 6.5 | No | Improper handling of compressed data in the shared GZIP decompressor used for AMQP 0-8/0-9/0-9-1 and AMQP 0-10 message delivery, message con... | 2026-10-05 |
| CVE-2026-92032 | critical | 9.6 | No | Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ES... | 2026-10-05 |
| CVE-2026-92034 | critical | 9.1 | No | Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. | 2026-10-05 |
| CVE-2026-92035 | critical | 9.6 | No | Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 1... | 2026-10-05 |
| CVE-2026-92036 | critical | 9.8 | No | Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. | 2026-10-05 |
| CVE-2026-92037 | critical | 9.8 | No | Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. | 2026-10-05 |
| CVE-2026-92038 | critical | 9.1 | No | Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156,... | 2026-10-05 |
| CVE-2026-92039 | medium | 6.3 | No | Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and... | 2026-10-05 |
| CVE-2026-92040 | high | 8.8 | No | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. | 2026-10-05 |
| CVE-2026-92041 | critical | 9.1 | No | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thu... | 2026-10-05 |
| CVE-2026-92042 | high | 7.5 | No | Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and... | 2026-10-05 |
| CVE-2026-92043 | high | 8.8 | No | Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox... | 2026-10-05 |
| CVE-2026-92044 | high | 7.5 | No | Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, a... | 2026-10-05 |
| CVE-2026-92045 | critical | 9.6 | No | Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3,... | 2026-10-05 |
| CVE-2026-63292 | high | 7.5 | No | Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a rem... | 2026-10-05 |
| CVE-2026-63686 | high | 7.5 | No | A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untruste... | 2026-10-05 |
| CVE-2026-73636 | high | 8.1 | No | Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a... | 2026-10-05 |
| CVE-2026-73637 | high | 7.3 | No | Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated... | 2026-10-05 |
| CVE-2026-79768 | medium | 5.3 | No | Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wi... | 2026-10-05 |
| CVE-2026-92046 | high | 8.8 | No | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 1... | 2026-10-05 |