Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92395 | critical | 9.1 | No | @fastify/proxy-addr is a Fastify plugin that determines a request's client address behind trusted reverse proxies, and it backs Fastify requ... | 2026-09-17 |
| CVE-2026-82964 | high | 8.8 | No | Improper preservation of permissions in the Avast sandbox minifilter driver (aswSnx.sys) on Windows allows a local, low-privileged attacker... | 2026-09-17 |
| CVE-2026-81320 | medium | 5.5 | No | A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the operator runs at debug log level 1 or higher, the... | 2026-09-17 |
| CVE-2026-73462 | medium | 6.5 | No | On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs... | 2026-09-17 |
| CVE-2026-73457 | medium | 5.3 | No | Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI... | 2026-09-17 |
| CVE-2026-73443 | medium | 4.7 | No | On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 ne... | 2026-09-17 |
| CVE-2026-73442 | low | 3.0 | No | On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the s... | 2026-09-17 |
| CVE-2026-73177 | not reported | — | No | Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of... | 2026-09-17 |
| CVE-2026-72963 | high | 7.0 | No | Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally. | 2026-09-17 |
| CVE-2026-72980 | medium | 5.5 | No | Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally. | 2026-09-17 |
| CVE-2026-72999 | medium | 6.8 | No | Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack. | 2026-09-17 |
| CVE-2026-73004 | medium | 5.5 | No | Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally. | 2026-09-17 |
| CVE-2026-81353 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. | 2026-09-17 |
| CVE-2026-91738 | critical | 9.6 | No | Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code o... | 2026-09-17 |
| CVE-2026-91739 | medium | 4.2 | No | Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the ren... | 2026-09-17 |
| CVE-2026-91740 | medium | 4.3 | No | Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted H... | 2026-09-17 |
| CVE-2026-91741 | high | 8.8 | No | Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbo... | 2026-09-17 |
| CVE-2026-91743 | high | 8.3 | No | Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potenti... | 2026-09-17 |
| CVE-2026-91744 | medium | 5.3 | No | Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the re... | 2026-09-17 |
| CVE-2026-91745 | high | 8.8 | No | Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr... | 2026-09-17 |