Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2018-19322 | not reported | — | Listed | The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functional... | — |
| CVE-2020-3153 | not reported | — | Listed | Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on... | — |
| CVE-2020-3433 | not reported | — | Listed | Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources... | — |
| CVE-2022-42827 | not reported | — | Listed | Apple iOS and iPadOS kernel contain an out-of-bounds write vulnerability which can allow an application to perform code execution with kerne... | — |
| CVE-2022-3723 | not reported | — | Listed | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2021-25370 | not reported | — | Listed | Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementat... | — |
| CVE-2021-25369 | not reported | — | Listed | Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability e... | — |
| CVE-2021-25337 | not reported | — | Listed | Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or... | — |
| CVE-2022-41128 | not reported | — | Listed | Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which allows for remote code execution. | — |
| CVE-2022-41125 | not reported | — | Listed | Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to... | — |
| CVE-2022-41073 | not reported | — | Listed | Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges. | — |
| CVE-2022-41091 | not reported | — | Listed | Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and avail... | — |
| CVE-2022-41049 | not reported | — | Listed | Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and avail... | — |
| CVE-2022-4135 | not reported | — | Listed | Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, t... | — |
| CVE-2021-35587 | not reported | — | Listed | Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager produ... | — |
| CVE-2022-4262 | not reported | — | Listed | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a... | — |
| CVE-2022-26501 | not reported | — | Listed | The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remo... | — |
| CVE-2022-26500 | not reported | — | Listed | The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remo... | — |
| CVE-2022-27518 | not reported | — | Listed | Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypas... | — |
| CVE-2022-44698 | not reported | — | Listed | Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW)... | — |