Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91292 | medium | 5.4 | No | Vulnerability in the JD Edwards EnterpriseOne Localizations product of Oracle JD Edwards (component: LATAM). The supported version that is a... | 2026-10-28 |
| CVE-2026-91291 | low | 3.6 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions t... | 2026-10-28 |
| CVE-2026-91290 | medium | 5.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are a... | 2026-10-28 |
| CVE-2026-91289 | medium | 5.3 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-91288 | high | 7.4 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that... | 2026-10-28 |
| CVE-2026-91287 | high | 8.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-91286 | high | 8.2 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-91285 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported... | 2026-10-28 |
| CVE-2026-91284 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported version... | 2026-10-28 |
| CVE-2026-91283 | medium | 4.3 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are a... | 2026-10-28 |
| CVE-2026-91273 | high | 8.6 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Env Tech SEC). Supported versions th... | 2026-10-28 |
| CVE-2026-69414 | high | 7.8 | No | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "Sh... | 2026-10-28 |
| CVE-2026-68807 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 2026-10-28 |
| CVE-2026-62909 | high | 7.8 | No | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-62902 | medium | 6.5 | No | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network. | 2026-10-28 |
| CVE-2026-62901 | high | 7.5 | No | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-62900 | medium | 5.9 | No | Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a... | 2026-10-28 |
| CVE-2026-62899 | medium | 5.9 | No | Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a securit... | 2026-10-28 |
| CVE-2026-62897 | high | 7.0 | No | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | 2026-10-28 |
| CVE-2026-62877 | high | 7.8 | No | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | 2026-10-28 |