Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2019-8605 not reported — Listed A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privil... —
CVE-2020-9907 not reported — Listed Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges... —
CVE-2020-3837 not reported — Listed Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with k... —
CVE-2021-30983 not reported — Listed Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges. —
CVE-2021-4034 not reported — Listed The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administr... —
CVE-2021-30533 not reported — Listed Google Chromium PopupBlocker contains an insufficient policy enforcement vulnerability that allows a remote attacker to bypass navigation re... —
CVE-2022-29499 not reported — Listed The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation. —
CVE-2022-26925 not reported — Listed Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to aut... —
CVE-2022-22047 not reported — Listed Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges. —
CVE-2022-26138 not reported — Listed Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated... —
CVE-2022-34713 not reported — Listed A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application. —
CVE-2022-37042 not reported — Listed Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was cha... —
CVE-2017-15944 not reported — Listed Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which can allow for remote code execution when chained. —
CVE-2022-21971 not reported — Listed Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution. —
CVE-2022-26923 not reported — Listed An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory C... —
CVE-2022-2856 not reported — Listed Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a ma... —
CVE-2022-32893 not reported — Listed Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafte... —
CVE-2022-32894 not reported — Listed Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges. —
CVE-2022-22536 not reported — Listed SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow... —
CVE-2022-0028 not reported — Listed A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TC... —