Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91252 | high | 8.2 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily... | 2026-10-28 |
| CVE-2026-91251 | critical | 9.9 | No | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12... | 2026-10-28 |
| CVE-2026-91250 | critical | 9.9 | No | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12... | 2026-10-28 |
| CVE-2026-91249 | low | 3.3 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. Easily... | 2026-10-28 |
| CVE-2026-91243 | critical | 9.6 | No | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versi... | 2026-10-28 |
| CVE-2026-91242 | high | 7.4 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins). The supported version that is affected is 11.4. Easily e... | 2026-10-28 |
| CVE-2026-70354 | high | 7.8 | No | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | 2026-10-28 |
| CVE-2026-91241 | critical | 9.1 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration).... | 2026-10-28 |
| CVE-2026-91240 | medium | 5.9 | No | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are af... | 2026-10-28 |
| CVE-2026-91239 | high | 8.8 | No | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected ar... | 2026-10-28 |
| CVE-2026-77468 | not reported | — | No | Lychee is a free, open-source photo-management tool. Prior to 7.7.0, GET /docs/api exposes the Scramble-generated OpenAPI documentation conf... | 2026-10-28 |
| CVE-2026-70341 | high | 8.8 | No | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | 2026-10-28 |
| CVE-2026-66798 | medium | 4.3 | No | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 2026-10-28 |
| CVE-2026-66324 | medium | 6.5 | No | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 2026-10-28 |
| CVE-2026-66323 | medium | 5.4 | No | Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code... | 2026-10-28 |
| CVE-2026-62904 | medium | 5.4 | No | Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | 2026-10-28 |
| CVE-2026-62898 | high | 7.5 | No | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | 2026-10-28 |
| CVE-2026-62886 | high | 7.8 | No | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-62871 | high | 7.8 | No | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | 2026-10-28 |
| CVE-2026-62752 | high | 7.8 | No | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 2026-10-28 |