Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83757 | high | 7.8 | No | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-100413 | high | 7.1 | No | SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unencrypted Ed25519... | 2026-10-29 |
| CVE-2026-83712 | high | 7.8 | No | Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. | 2026-10-29 |
| CVE-2026-83706 | medium | 6.7 | No | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83704 | high | 7.8 | No | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevat... | 2026-10-29 |
| CVE-2026-28854 | high | 7.5 | No | The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app... | 2026-10-29 |
| CVE-2026-83690 | high | 7.8 | No | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-86915 | medium | 4.7 | No | A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected sy... | 2026-10-29 |
| CVE-2026-83691 | high | 7.8 | No | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-86928 | medium | 5.5 | No | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access prot... | 2026-10-29 |
| CVE-2026-86932 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to acce... | 2026-10-29 |
| CVE-2026-86933 | low | 3.3 | No | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to a... | 2026-10-29 |
| CVE-2026-83758 | high | 7.8 | No | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally. | 2026-10-29 |
| CVE-2026-86935 | medium | 5.5 | No | This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user... | 2026-10-29 |
| CVE-2026-86940 | medium | 5.5 | No | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel... | 2026-10-29 |
| CVE-2026-86979 | medium | 5.5 | No | A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user... | 2026-10-29 |
| CVE-2026-83686 | medium | 5.5 | No | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83664 | medium | 5.5 | No | Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to... | 2026-10-29 |
| CVE-2026-83665 | high | 7.5 | No | Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 2026-10-29 |
| CVE-2026-83668 | medium | 5.5 | No | Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. | 2026-10-29 |