Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-70128 | medium | 5.5 | No | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 2026-10-28 |
| CVE-2026-70262 | critical | 9.8 | No | Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network. | 2026-10-28 |
| CVE-2026-91357 | medium | 5.3 | No | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry). Supported versions that are... | 2026-10-28 |
| CVE-2026-91212 | high | 8.6 | No | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions tha... | 2026-10-28 |
| CVE-2026-91211 | high | 8.7 | No | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). Sup... | 2026-10-28 |
| CVE-2026-91210 | medium | 6.5 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is... | 2026-10-28 |
| CVE-2026-91209 | medium | 4.2 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4.... | 2026-10-28 |
| CVE-2026-91208 | medium | 5.1 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficu... | 2026-10-28 |
| CVE-2026-90726 | medium | 6.0 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-28 |
| CVE-2026-87399 | medium | 6.3 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is... | 2026-10-28 |
| CVE-2026-70277 | medium | 5.5 | No | Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally. | 2026-10-28 |
| CVE-2026-83526 | high | 8.8 | No | The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the check_mimety... | 2026-10-28 |
| CVE-2026-82962 | medium | 6.5 | No | ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet header in place, by pushing it into the headroom of the... | 2026-10-28 |
| CVE-2026-82961 | high | 7.8 | No | The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argument supplied by a user-mode caller. z_vrfy_gpio_pin_... | 2026-10-28 |
| CVE-2026-74990 | critical | 9.8 | No | Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed eviden... | 2026-10-28 |
| CVE-2026-74989 | critical | 9.8 | No | Internally found bugs present in Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect an... | 2026-10-28 |
| CVE-2026-74988 | critical | 9.8 | No | Internally found bugs present in Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another secur... | 2026-10-28 |
| CVE-2026-74987 | critical | 9.8 | No | Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corrupt... | 2026-10-28 |
| CVE-2026-74969 | high | 8.8 | No | Race condition, use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Fir... | 2026-10-28 |
| CVE-2026-74949 | high | 8.8 | No | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thun... | 2026-10-28 |