Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-30983 | not reported | — | Listed | Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges. | — |
| CVE-2021-4034 | not reported | — | Listed | The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administr... | — |
| CVE-2021-30533 | not reported | — | Listed | Google Chromium PopupBlocker contains an insufficient policy enforcement vulnerability that allows a remote attacker to bypass navigation re... | — |
| CVE-2022-29499 | not reported | — | Listed | The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation. | — |
| CVE-2022-26925 | not reported | — | Listed | Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to aut... | — |
| CVE-2022-22047 | not reported | — | Listed | Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges. | — |
| CVE-2022-26138 | not reported | — | Listed | Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated... | — |
| CVE-2022-34713 | not reported | — | Listed | A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application. | — |
| CVE-2022-37042 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was cha... | — |
| CVE-2017-15944 | not reported | — | Listed | Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which can allow for remote code execution when chained. | — |
| CVE-2022-21971 | not reported | — | Listed | Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution. | — |
| CVE-2022-26923 | not reported | — | Listed | An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory C... | — |
| CVE-2022-2856 | not reported | — | Listed | Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a ma... | — |
| CVE-2022-32893 | not reported | — | Listed | Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafte... | — |
| CVE-2022-32894 | not reported | — | Listed | Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges. | — |
| CVE-2022-22536 | not reported | — | Listed | SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow... | — |
| CVE-2022-0028 | not reported | — | Listed | A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TC... | — |
| CVE-2020-28949 | not reported | — | Listed | PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Appli... | — |
| CVE-2020-36193 | not reported | — | Listed | PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP... | — |
| CVE-2021-31010 | not reported | — | Listed | In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions. | — |