Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102311 | low | 3.4 | No | Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the render... | 2026-09-30 |
| CVE-2026-102327 | high | 7.5 | No | Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the r... | 2026-09-30 |
| CVE-2026-102331 | critical | 9.6 | No | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary co... | 2026-09-30 |
| CVE-2026-69345 | medium | 5.5 | No | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. | 2026-09-30 |
| CVE-2026-69303 | medium | 5.5 | No | Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally. | 2026-09-30 |
| CVE-2026-69308 | medium | 5.5 | No | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. | 2026-09-30 |
| CVE-2026-69313 | high | 7.1 | No | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. | 2026-09-30 |
| CVE-2026-69317 | medium | 5.7 | No | Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network. | 2026-09-30 |
| CVE-2026-69325 | high | 8.1 | No | Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network. | 2026-09-30 |
| CVE-2026-69329 | high | 7.5 | No | Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network. | 2026-09-30 |
| CVE-2026-69336 | high | 7.1 | No | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. | 2026-09-30 |
| CVE-2026-69338 | high | 7.1 | No | Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network. | 2026-09-30 |
| CVE-2026-69355 | high | 8.8 | No | External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network. | 2026-09-30 |
| CVE-2026-69356 | critical | 9.3 | No | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized att... | 2026-09-30 |
| CVE-2026-91206 | medium | 6.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a remote attacker to perf... | 2026-09-30 |
| CVE-2026-91204 | medium | 6.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an anonymous remote attac... | 2026-09-30 |
| CVE-2026-82546 | medium | 6.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an unauthenticated remote... | 2026-09-30 |
| CVE-2026-24061 | critical | 9.8 | Listed | telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable. | 2026-09-30 |
| CVE-2026-69358 | high | 7.1 | No | Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. | 2026-09-30 |
| CVE-2026-100315 | high | 7.3 | No | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unkno... | 2026-09-30 |