Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82187 | critical | 9.8 | No | The Web to Print Online Designer WordPress plugin before 2.15.0 does not validate the type or extension of uploaded files, and hands the tok... | 2026-09-21 |
| CVE-2026-93373 | critical | 9.6 | No | Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox... | 2026-09-21 |
| CVE-2026-93372 | critical | 9.6 | No | Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside t... | 2026-09-21 |
| CVE-2026-83052 | high | 7.6 | No | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are aff... | 2026-09-21 |
| CVE-2026-83411 | high | 8.8 | No | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1... | 2026-09-21 |
| CVE-2026-69393 | medium | 5.7 | No | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network. | 2026-09-21 |
| CVE-2026-87233 | high | 7.6 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-21 |
| CVE-2026-87243 | high | 8.0 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-21 |
| CVE-2026-87242 | high | 7.4 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-21 |
| CVE-2026-87241 | high | 8.1 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-21 |
| CVE-2026-87236 | high | 7.1 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-21 |
| CVE-2026-87235 | high | 7.4 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-21 |
| CVE-2026-69617 | high | 7.0 | No | Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. | 2026-09-21 |
| CVE-2026-87234 | high | 8.1 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-21 |
| CVE-2026-91742 | medium | 4.8 | No | Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering t... | 2026-09-21 |
| CVE-2026-93381 | high | 8.8 | No | Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to p... | 2026-09-21 |
| CVE-2026-93884 | not reported | — | No | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descri... | 2026-09-21 |
| CVE-2026-83549 | high | 7.8 | Listed | Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi... | 2026-09-21 |
| CVE-2026-87976 | high | 8.1 | No | Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and... | 2026-09-21 |
| CVE-2024-50492 | critical | 9.8 | No | Improper Control of Generation of Code ('Code Injection') vulnerability in Scott Paterson ScottCart scottcart allows Code Injection.This iss... | 2026-09-21 |