Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-56941 | high | 8.4 | No | In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escala... | 2026-09-21 |
| CVE-2026-56932 | medium | 6.7 | No | In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalatio... | 2026-09-21 |
| CVE-2026-56923 | medium | 6.4 | No | In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation... | 2026-09-21 |
| CVE-2026-56922 | medium | 6.7 | No | In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System executi... | 2026-09-21 |
| CVE-2026-56915 | medium | 6.4 | No | In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of... | 2026-09-21 |
| CVE-2026-56914 | high | 8.4 | No | In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no... | 2026-09-21 |
| CVE-2025-31277 | high | 8.8 | Listed | The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvO... | 2026-09-21 |
| CVE-2026-92127 | high | 8.0 | No | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item configuration when... | 2026-09-21 |
| CVE-2026-92128 | high | 7.5 | No | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of the... | 2026-09-21 |
| CVE-2026-83014 | high | 8.1 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager). Supported versions that are a... | 2026-09-21 |
| CVE-2026-92129 | high | 7.5 | No | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added dynamically to... | 2026-09-21 |
| CVE-2026-69602 | high | 7.5 | No | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network. | 2026-09-21 |
| CVE-2026-83015 | high | 7.0 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager). Supported versions that are a... | 2026-09-21 |
| CVE-2026-83016 | high | 7.2 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected a... | 2026-09-21 |
| CVE-2026-83017 | high | 8.8 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions tha... | 2026-09-21 |
| CVE-2026-83018 | high | 7.8 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected a... | 2026-09-21 |
| CVE-2026-69606 | high | 7.0 | No | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. | 2026-09-21 |
| CVE-2026-83019 | high | 8.1 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected a... | 2026-09-21 |
| CVE-2026-83154 | critical | 9.1 | No | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26... | 2026-09-21 |
| CVE-2026-83183 | high | 7.5 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-09-21 |