Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83765 | medium | 5.5 | No | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83766 | medium | 4.2 | No | Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network. | 2026-10-29 |
| CVE-2026-118316 | critical | 9.6 | No | Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outs... | 2026-10-29 |
| CVE-2026-118318 | medium | 4.3 | No | Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. (Chr... | 2026-10-29 |
| CVE-2026-118319 | medium | 4.3 | No | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox vi... | 2026-10-29 |
| CVE-2026-118321 | critical | 9.6 | No | Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arb... | 2026-10-29 |
| CVE-2026-118322 | medium | 4.3 | No | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox v... | 2026-10-29 |
| CVE-2026-118332 | critical | 9.6 | No | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary... | 2026-10-29 |
| CVE-2026-118340 | critical | 9.6 | No | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside th... | 2026-10-29 |
| CVE-2026-118342 | critical | 9.6 | No | Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsi... | 2026-10-29 |
| CVE-2026-118355 | critical | 9.6 | No | Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code... | 2026-10-29 |
| CVE-2026-83767 | high | 7.8 | No | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83769 | high | 7.8 | No | Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-46300 | high | 7.8 | Listed | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coa... | 2026-10-29 |
| CVE-2026-41709 | low | 2.7 | Listed | VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations... | 2026-10-29 |
| CVE-2026-115397 | medium | 5.5 | No | Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts e... | 2026-10-29 |
| CVE-2026-115398 | medium | 5.5 | No | Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSys... | 2026-10-29 |
| CVE-2026-115503 | medium | 5.5 | No | Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that... | 2026-10-29 |
| CVE-2026-91215 | high | 8.8 | No | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected ar... | 2026-10-29 |
| CVE-2026-91213 | high | 8.8 | No | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: BPM Composer). Supported versi... | 2026-10-29 |