Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87516 | medium | 4.3 | No | Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a craft... | 2026-09-09 |
| CVE-2026-87517 | low | 3.1 | No | Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass... | 2026-09-09 |
| CVE-2026-87531 | low | 3.1 | No | Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtai... | 2026-09-09 |
| CVE-2026-87573 | medium | 4.3 | No | Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a cra... | 2026-09-09 |
| CVE-2026-87574 | medium | 4.3 | No | Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafte... | 2026-09-09 |
| CVE-2026-85089 | medium | 6.5 | No | FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. T... | 2026-09-09 |
| CVE-2026-87642 | medium | 4.3 | No | Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HT... | 2026-09-09 |
| CVE-2026-87652 | low | 3.1 | No | Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer proces... | 2026-09-09 |
| CVE-2026-87658 | medium | 4.3 | No | Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cro... | 2026-09-09 |
| CVE-2026-80081 | high | 8.8 | No | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 2026-09-09 |
| CVE-2026-78519 | high | 8.8 | No | Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-09-09 |
| CVE-2026-80171 | medium | 4.7 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Entr... | 2026-09-09 |
| CVE-2026-80073 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | 2026-09-09 |
| CVE-2026-81168 | low | 3.7 | No | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This is... | 2026-09-09 |
| CVE-2026-81167 | medium | 4.8 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Address Suggestion allows Cross... | 2026-09-09 |
| CVE-2026-81162 | medium | 5.3 | No | Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows F... | 2026-09-09 |
| CVE-2026-69857 | high | 8.8 | No | Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network. | 2026-09-09 |
| CVE-2026-80128 | medium | 6.5 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authenti... | 2026-09-09 |
| CVE-2026-78487 | medium | 5.5 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded... | 2026-09-09 |
| CVE-2026-79734 | high | 7.5 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific... | 2026-09-09 |