Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83764 | medium | 5.5 | No | Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83518 | high | 7.8 | No | Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83515 | high | 7.5 | No | Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network. | 2026-10-29 |
| CVE-2026-85320 | medium | 5.5 | No | Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-19603 | medium | 4.3 | No | Mattermost versions 11.9.x | 2026-10-29 |
| CVE-2026-19867 | medium | 4.3 | No | Mattermost versions 11.10.x | 2026-10-29 |
| CVE-2026-16251 | medium | 6.5 | No | Mattermost versions 11.10.x | 2026-10-29 |
| CVE-2026-19601 | medium | 4.9 | No | Mattermost versions 11.9.x | 2026-10-29 |
| CVE-2026-19541 | medium | 6.5 | No | Mattermost versions 11.9.x | 2026-10-29 |
| CVE-2026-18795 | medium | 6.4 | No | Mattermost versions 11.10.x | 2026-10-29 |
| CVE-2026-16453 | high | 7.1 | No | Mattermost versions 11.10.x | 2026-10-29 |
| CVE-2026-18223 | medium | 5.0 | No | Mattermost versions 11.10.x | 2026-10-29 |
| CVE-2026-18256 | medium | 4.3 | No | Mattermost versions 11.10.x | 2026-10-29 |
| CVE-2026-18560 | medium | 4.3 | No | Mattermost versions 11.10.x | 2026-10-29 |
| CVE-2026-18799 | medium | 4.3 | No | Mattermost versions 11.10.x | 2026-10-29 |
| CVE-2026-85321 | high | 7.5 | No | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny... | 2026-10-29 |
| CVE-2026-83564 | high | 7.0 | No | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-18551 | medium | 6.5 | No | Mattermost versions 11.10.x | 2026-10-29 |
| CVE-2026-85828 | high | 7.0 | No | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-98059 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark sched_process_wait argument as nullable do_wait() passes wo-... | 2026-10-29 |