Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-80743 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers The irq... | 2026-09-03 |
| CVE-2026-80742 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't send zero-byte data in tpacket_snd(). syzbot reported... | 2026-09-03 |
| CVE-2026-80740 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large for display When sc... | 2026-09-03 |
| CVE-2026-80739 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In c... | 2026-09-03 |
| CVE-2026-80733 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE() from sk_mc_loop() sk_mc_loop() can be calle... | 2026-09-03 |
| CVE-2026-80730 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix crash passing ERR_PTR to kthread_stop() In test_ringb... | 2026-09-03 |
| CVE-2026-80727 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the foll... | 2026-09-03 |
| CVE-2026-78689 | high | 8.1 | No | Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiv... | 2026-09-03 |
| CVE-2026-77180 | high | 8.3 | No | When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NG... | 2026-09-03 |
| CVE-2026-66842 | high | 8.8 | No | BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed... | 2026-09-03 |
| CVE-2026-66362 | high | 8.1 | No | Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX config... | 2026-09-03 |
| CVE-2026-20212 | critical | 9.8 | No | A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execu... | 2026-09-03 |
| CVE-2026-15926 | not reported | — | No | Rejected reason: Red Hat Product Security has determined that this CVE ID is not needed | 2026-09-03 |
| CVE-2026-84126 | medium | 4.3 | No | Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. | 2026-09-03 |
| CVE-2026-84127 | medium | 4.3 | No | Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155. | 2026-09-03 |
| CVE-2026-84128 | high | 8.8 | No | Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. | 2026-09-03 |
| CVE-2026-84129 | critical | 9.8 | No | Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and... | 2026-09-03 |
| CVE-2026-84131 | high | 8.8 | No | Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Fire... | 2026-09-03 |
| CVE-2026-84145 | high | 7.5 | No | Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of me... | 2026-09-03 |
| CVE-2023-7299 | critical | 9.8 | No | A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown code of the file /dat... | 2026-09-03 |