Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-103314 | high | 7.4 | No | A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain u... | 2026-10-29 |
| CVE-2026-102559 | high | 8.6 | No | A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByt... | 2026-10-29 |
| CVE-2026-102558 | high | 8.6 | No | A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray bas... | 2026-10-29 |
| CVE-2026-102557 | high | 8.6 | No | A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message... | 2026-10-29 |
| CVE-2026-102556 | high | 8.6 | No | A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteA... | 2026-10-29 |
| CVE-2026-110076 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-10-29 |
| CVE-2026-110077 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-10-29 |
| CVE-2026-96108 | high | 7.8 | No | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-95943 | high | 7.0 | No | Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83760 | medium | 5.5 | No | Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-96206 | medium | 5.5 | No | Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83741 | high | 7.8 | No | Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83740 | high | 7.0 | No | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83739 | high | 7.5 | No | Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network. | 2026-10-29 |
| CVE-2026-83738 | high | 7.0 | No | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83725 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. | 2026-10-29 |
| CVE-2026-83737 | medium | 5.5 | No | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83513 | high | 7.8 | No | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83736 | medium | 5.5 | No | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83514 | high | 7.8 | No | Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | 2026-10-29 |