Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92217 | medium | 6.3 | No | A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file renderers/web_core/s... | 2026-09-17 |
| CVE-2026-86109 | medium | 6.6 | No | The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does... | 2026-09-17 |
| CVE-2026-86108 | high | 8.0 | No | Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized ma... | 2026-09-17 |
| CVE-2026-84601 | medium | 5.5 | No | A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass... | 2026-09-17 |
| CVE-2026-84584 | high | 8.4 | No | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of... | 2026-09-17 |
| CVE-2026-84569 | medium | 5.5 | No | An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Golden Gate 27. A... | 2026-09-17 |
| CVE-2026-84552 | medium | 5.5 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G... | 2026-09-17 |
| CVE-2026-73450 | medium | 6.9 | No | On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Pr... | 2026-09-17 |
| CVE-2026-69314 | high | 7.1 | No | Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network. | 2026-09-17 |
| CVE-2026-65383 | medium | 4.4 | No | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may bypass Gatekeeper checks. | 2026-09-17 |
| CVE-2026-65342 | high | 7.5 | No | A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.... | 2026-09-17 |
| CVE-2026-43785 | medium | 5.5 | No | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Seq... | 2026-09-17 |
| CVE-2026-43697 | high | 7.1 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta... | 2026-09-17 |
| CVE-2026-16588 | medium | 6.5 | No | The WP Directory Kit plugin for WordPress is vulnerable to blind SQL Injection via the 'order_by' parameter in all versions up to, and inclu... | 2026-09-17 |
| CVE-2026-12793 | critical | 9.8 | No | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and inclu... | 2026-09-17 |
| CVE-2026-69316 | medium | 4.7 | No | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 2026-09-17 |
| CVE-2026-69333 | high | 7.0 | No | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 2026-09-17 |
| CVE-2026-69344 | medium | 5.5 | No | Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | 2026-09-17 |
| CVE-2026-69348 | high | 7.8 | No | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | 2026-09-17 |
| CVE-2026-20274 | critical | 9.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a... | 2026-09-17 |