Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-53638 | medium | 4.3 | No | Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an author... | 2026-09-14 |
| CVE-2026-38998 | medium | 6.5 | No | A use-after-free in the SocketDescriptor::tcpReadHandler1 function (liveMedia/RTPInterface.cpp) of LIVE555 Streaming Media (version 2026.02.... | 2026-09-14 |
| CVE-2026-18090 | medium | 6.1 | No | A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially craf... | 2026-09-14 |
| CVE-2026-72991 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-14 |
| CVE-2026-53683 | medium | 4.3 | No | reset_password.html parses query string parameters and uses the 'url' parameter as a redirection target (window.location = url) after passwo... | 2026-09-14 |
| CVE-2026-86452 | high | 7.5 | No | Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bound... | 2026-09-14 |
| CVE-2026-86418 | medium | 4.3 | No | Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restri... | 2026-09-14 |
| CVE-2026-81578 | critical | 9.8 | Listed | An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, u... | 2026-09-14 |
| CVE-2026-82078 | critical | 9.1 | Listed | An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application in... | 2026-09-14 |
| CVE-2026-49030 | not reported | — | No | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation... | 2026-09-13 |
| CVE-2026-83987 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-12 |
| CVE-2026-84869 | critical | 9.9 | Listed | A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorizatio... | 2026-09-12 |
| CVE-2026-83985 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-12 |
| CVE-2026-83983 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-12 |
| CVE-2026-83982 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-12 |
| CVE-2026-83981 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-12 |
| CVE-2026-83980 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-12 |
| CVE-2026-83977 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-12 |
| CVE-2026-83973 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-12 |
| CVE-2026-83972 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-12 |