Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83747 | medium | 5.5 | No | Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83748 | critical | 9.8 | No | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | 2026-10-29 |
| CVE-2026-83749 | high | 7.0 | No | Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-90531 | critical | 9.6 | No | Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in... | 2026-10-29 |
| CVE-2026-83750 | high | 7.0 | No | Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83751 | high | 7.0 | No | Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83752 | high | 7.0 | No | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83753 | high | 7.8 | No | Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83754 | high | 7.5 | No | Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | 2026-10-29 |
| CVE-2026-110078 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-10-29 |
| CVE-2026-83755 | medium | 5.5 | No | Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83757 | high | 7.8 | No | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-100413 | high | 7.1 | No | SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unencrypted Ed25519... | 2026-10-29 |
| CVE-2026-83712 | high | 7.8 | No | Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. | 2026-10-29 |
| CVE-2026-83706 | medium | 6.7 | No | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83704 | high | 7.8 | No | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevat... | 2026-10-29 |
| CVE-2026-28854 | high | 7.5 | No | The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app... | 2026-10-29 |
| CVE-2026-83690 | high | 7.8 | No | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-86915 | medium | 4.7 | No | A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected sy... | 2026-10-29 |
| CVE-2026-83691 | high | 7.8 | No | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally. | 2026-10-29 |