Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-114621 | high | 8.8 | No | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and... | 2026-10-29 |
| CVE-2026-113399 | critical | 9.8 | No | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. | 2026-10-29 |
| CVE-2026-108088 | high | 7.5 | No | ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using the cache on a mult... | 2026-10-29 |
| CVE-2026-111946 | medium | 5.3 | No | Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. When the response b... | 2026-10-29 |
| CVE-2026-110688 | high | 7.5 | No | Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incr_pars... | 2026-10-29 |
| CVE-2026-110687 | high | 7.5 | No | Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cmp. canonical sorts... | 2026-10-29 |
| CVE-2025-60482 | medium | 5.5 | No | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-maste... | 2026-10-29 |
| CVE-2026-83918 | high | 7.8 | No | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83919 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally. | 2026-10-29 |
| CVE-2026-83920 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83921 | high | 7.0 | No | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83922 | high | 7.8 | No | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83569 | high | 7.8 | No | Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-70110 | high | 7.8 | No | Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83759 | high | 8.8 | No | Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute c... | 2026-10-29 |
| CVE-2026-70109 | high | 7.8 | No | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-85318 | high | 7.8 | No | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83762 | high | 7.8 | No | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83763 | high | 7.8 | No | Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges lo... | 2026-10-29 |
| CVE-2026-85319 | high | 7.5 | No | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny... | 2026-10-29 |