Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-58739 | medium | 6.7 | No | In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to loc... | 2026-09-18 |
| CVE-2026-58734 | high | 7.0 | No | In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escal... | 2026-09-18 |
| CVE-2026-58731 | medium | 6.2 | No | In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local... | 2026-09-18 |
| CVE-2026-58728 | high | 7.0 | No | In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with... | 2026-09-18 |
| CVE-2026-58726 | medium | 6.7 | No | In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of p... | 2026-09-18 |
| CVE-2026-58724 | high | 7.0 | No | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with Sys... | 2026-09-18 |
| CVE-2026-58718 | medium | 6.7 | No | In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to... | 2026-09-18 |
| CVE-2026-58721 | medium | 4.4 | No | In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disc... | 2026-09-18 |
| CVE-2026-84609 | critical | 9.8 | No | A permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Se... | 2026-09-18 |
| CVE-2026-86911 | medium | 5.5 | No | This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass... | 2026-09-18 |
| CVE-2026-86897 | medium | 5.5 | No | This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 2... | 2026-09-18 |
| CVE-2026-86910 | medium | 5.5 | No | A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Taho... | 2026-09-18 |
| CVE-2018-13410 | critical | 9.8 | No | Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and applica... | 2026-09-18 |
| CVE-2026-85544 | medium | 6.1 | No | Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with... | 2026-09-18 |
| CVE-2026-84578 | high | 8.8 | No | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app... | 2026-09-18 |
| CVE-2026-20361 | high | 8.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a... | 2026-09-18 |
| CVE-2026-43815 | high | 8.8 | No | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe... | 2026-09-18 |
| CVE-2026-20341 | critical | 9.1 | No | A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attack... | 2026-09-18 |
| CVE-2026-20324 | critical | 9.9 | No | A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an... | 2026-09-18 |
| CVE-2026-20242 | critical | 9.8 | No | A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthentic... | 2026-09-18 |