Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-33246 | not reported | — | Listed | Several components of Apache RocketMQ, including NameServer, Broker, and Controller, are exposed to the extranet and lack permission verific... | — |
| CVE-2023-41061 | not reported | — | Listed | Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafte... | — |
| CVE-2023-41064 | not reported | — | Listed | Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead... | — |
| CVE-2023-36802 | not reported | — | Listed | Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2023-36761 | not reported | — | Listed | Microsoft Word contains an unspecified vulnerability that allows for information disclosure. | — |
| CVE-2023-4863 | not reported | — | Listed | Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory wr... | — |
| CVE-2023-20269 | not reported | — | Listed | Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthentica... | — |
| CVE-2023-35674 | not reported | — | Listed | Android Framework contains an unspecified vulnerability that allows for privilege escalation. | — |
| CVE-2023-26369 | not reported | — | Listed | Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution. | — |
| CVE-2021-3129 | not reported | — | Listed | Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure... | — |
| CVE-2014-8361 | not reported | — | Listed | Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute maliciou... | — |
| CVE-2022-22265 | not reported | — | Listed | Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution. | — |
| CVE-2023-28434 | not reported | — | Listed | MinIO contains a security feature bypass vulnerability that allows an attacker to use crafted requests to bypass metadata bucket name checki... | — |
| CVE-2023-41179 | not reported | — | Listed | Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that co... | — |
| CVE-2023-41993 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously cr... | — |
| CVE-2023-41992 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and watchOS contain an unspecified vulnerability that allows for local privilege escalation. | — |
| CVE-2023-41991 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass sign... | — |
| CVE-2018-14667 | not reported | — | Listed | Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthent... | — |
| CVE-2023-5217 | not reported | — | Listed | Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit he... | — |
| CVE-2023-4211 | not reported | — | Listed | Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory proc... | — |