Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-77889 | high | 7.5 | No | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a... | 2026-09-24 |
| CVE-2026-77888 | high | 7.5 | No | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a... | 2026-09-24 |
| CVE-2026-77887 | medium | 6.4 | No | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. | 2026-09-24 |
| CVE-2026-77886 | high | 7.5 | No | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 2026-09-24 |
| CVE-2026-77525 | medium | 4.2 | No | MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, management chat-record routes authorize the path application... | 2026-09-24 |
| CVE-2026-77522 | medium | 4.3 | No | MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the knowledge web-document import and synchronizatio... | 2026-09-24 |
| CVE-2026-77519 | medium | 5.4 | No | MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, the /chat/api/mcp authentication path looks up an Applicatio... | 2026-09-24 |
| CVE-2026-77503 | high | 7.8 | No | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-77502 | high | 7.5 | No | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 2026-09-24 |
| CVE-2026-77501 | high | 7.5 | No | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 2026-09-24 |
| CVE-2026-77499 | high | 7.5 | No | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a... | 2026-09-24 |
| CVE-2026-77498 | high | 7.5 | No | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 2026-09-24 |
| CVE-2026-77495 | high | 8.8 | No | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 2026-09-24 |
| CVE-2026-77494 | high | 7.5 | No | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a... | 2026-09-24 |
| CVE-2026-77493 | critical | 9.8 | No | Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | 2026-09-24 |
| CVE-2026-76898 | not reported | — | No | draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.3.8, src/main/java/com/mxgraph/online/Utils.java ch... | 2026-09-24 |
| CVE-2026-73025 | critical | 9.8 | No | Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network. | 2026-09-24 |
| CVE-2026-73024 | high | 7.8 | No | Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-73023 | high | 8.8 | No | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 2026-09-24 |
| CVE-2026-73019 | medium | 4.3 | No | Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network. | 2026-09-24 |