Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-86915 | medium | 4.7 | No | A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected sy... | 2026-10-29 |
| CVE-2026-83691 | high | 7.8 | No | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-86928 | medium | 5.5 | No | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access prot... | 2026-10-29 |
| CVE-2026-86932 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to acce... | 2026-10-29 |
| CVE-2026-86933 | low | 3.3 | No | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to a... | 2026-10-29 |
| CVE-2026-83758 | high | 7.8 | No | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally. | 2026-10-29 |
| CVE-2026-86940 | medium | 5.5 | No | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel... | 2026-10-29 |
| CVE-2026-86979 | medium | 5.5 | No | A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user... | 2026-10-29 |
| CVE-2026-83686 | medium | 5.5 | No | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83664 | medium | 5.5 | No | Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to... | 2026-10-29 |
| CVE-2026-83665 | high | 7.5 | No | Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | 2026-10-29 |
| CVE-2026-83668 | medium | 5.5 | No | Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83669 | high | 7.8 | No | Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83671 | medium | 6.5 | No | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83672 | medium | 4.7 | No | Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose in... | 2026-10-29 |
| CVE-2026-83675 | high | 7.0 | No | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83676 | high | 7.0 | No | Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83521 | medium | 6.5 | No | Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network. | 2026-10-29 |
| CVE-2026-83522 | high | 8.1 | No | Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a netw... | 2026-10-29 |
| CVE-2026-83677 | high | 7.5 | No | Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network. | 2026-10-29 |