Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-23792 | medium | 4.0 | No | An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W... | 2026-09-22 |
| CVE-2026-23791 | medium | 4.2 | No | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds... | 2026-09-22 |
| CVE-2026-23790 | medium | 4.2 | No | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vu... | 2026-09-22 |
| CVE-2026-23789 | high | 7.8 | No | An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400... | 2026-09-22 |
| CVE-2026-23788 | medium | 4.2 | No | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver (due to... | 2026-09-22 |
| CVE-2026-23787 | medium | 4.2 | No | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A Use-After-Free... | 2026-09-22 |
| CVE-2026-23786 | low | 2.8 | No | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race co... | 2026-09-22 |
| CVE-2022-42917 | medium | 6.7 | No | In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/... | 2026-09-22 |
| CVE-2020-15875 | medium | 5.0 | No | An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the Li... | 2026-09-22 |
| CVE-2026-90678 | high | 7.5 | No | An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy m... | 2026-09-22 |
| CVE-2026-90616 | high | 7.4 | No | In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated... | 2026-09-22 |
| CVE-2026-78807 | high | 7.1 | No | An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA c... | 2026-09-22 |
| CVE-2026-69771 | medium | 4.7 | No | Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass... | 2026-09-22 |
| CVE-2026-69775 | high | 7.5 | No | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network. | 2026-09-22 |
| CVE-2024-26305 | critical | 9.8 | No | There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sendin... | 2026-09-22 |
| CVE-2026-71047 | high | 8.8 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are... | 2026-09-22 |
| CVE-2026-73942 | high | 8.8 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are aff... | 2026-09-22 |
| CVE-2026-69784 | high | 8.8 | No | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | 2026-09-22 |
| CVE-2026-73943 | high | 7.6 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are aff... | 2026-09-22 |
| CVE-2026-73949 | high | 8.8 | No | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are... | 2026-09-22 |