Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-81955 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | 2026-09-24 |
| CVE-2026-81469 | high | 7.8 | No | Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attack... | 2026-09-24 |
| CVE-2026-81355 | high | 7.8 | No | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally. | 2026-09-24 |
| CVE-2026-80096 | high | 8.8 | No | Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. | 2026-09-24 |
| CVE-2026-79918 | medium | 6.3 | No | MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LD_PRELOAD sandbox hooks execve, execvpe,... | 2026-09-24 |
| CVE-2026-80075 | high | 7.8 | No | Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-78523 | high | 7.5 | No | Use after free in Windows DNS allows an unauthorized attacker to deny service over a network. | 2026-09-24 |
| CVE-2026-78508 | medium | 4.6 | No | Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack. | 2026-09-24 |
| CVE-2026-78453 | medium | 6.5 | No | Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information o... | 2026-09-24 |
| CVE-2026-78449 | high | 8.1 | No | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. | 2026-09-24 |
| CVE-2026-78445 | critical | 9.8 | No | Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. | 2026-09-24 |
| CVE-2026-77905 | high | 7.0 | No | Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-77904 | high | 7.8 | No | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-77895 | high | 7.5 | No | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 2026-09-24 |
| CVE-2026-77894 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attack... | 2026-09-24 |
| CVE-2026-77893 | high | 7.5 | No | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 2026-09-24 |
| CVE-2026-77892 | medium | 6.8 | No | No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack. | 2026-09-24 |
| CVE-2026-77561 | medium | 5.3 | No | Tinyauth is an authentication and authorization server. Prior to 5.1.0, an unauthenticated remote attacker can send POST /api/user/login req... | 2026-09-24 |
| CVE-2026-77891 | medium | 6.4 | No | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. | 2026-09-24 |
| CVE-2026-77890 | high | 7.5 | No | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a... | 2026-09-24 |