Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-105205 | medium | 5.3 | No | SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and refere... | 2026-10-05 |
| CVE-2026-105148 | high | 7.3 | No | A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.... | 2026-10-05 |
| CVE-2026-73512 | high | 7.5 | No | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's... | 2026-10-05 |
| CVE-2026-50572 | medium | 5.9 | No | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's... | 2026-10-05 |
| CVE-2026-48521 | medium | 5.9 | No | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's... | 2026-10-05 |
| CVE-2026-73549 | medium | 5.3 | No | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's... | 2026-10-05 |
| CVE-2026-73553 | high | 7.5 | No | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, When ig... | 2026-10-05 |
| CVE-2026-73513 | high | 7.5 | No | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's... | 2026-10-05 |
| CVE-2026-73550 | high | 7.5 | No | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy c... | 2026-10-05 |
| CVE-2026-100819 | critical | 9.6 | No | Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 1... | 2026-10-05 |
| CVE-2026-100820 | high | 8.8 | No | Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, T... | 2026-10-05 |
| CVE-2026-73551 | medium | 5.3 | No | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's... | 2026-10-05 |
| CVE-2026-100832 | high | 8.8 | No | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4... | 2026-10-05 |
| CVE-2026-103679 | medium | 6.5 | No | A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulatio... | 2026-10-05 |
| CVE-2026-96869 | medium | 4.3 | No | Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,... | 2026-10-05 |
| CVE-2026-100782 | high | 8.8 | No | Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thun... | 2026-10-05 |
| CVE-2026-100783 | medium | 4.3 | No | Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, T... | 2026-10-05 |
| CVE-2026-100784 | high | 8.8 | No | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.... | 2026-10-05 |
| CVE-2026-103680 | medium | 6.5 | No | A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numbered backup suffixes... | 2026-10-05 |
| CVE-2026-73546 | high | 7.4 | No | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's... | 2026-10-05 |