Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-108130 | high | 7.8 | No | Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locall... | 2026-10-28 |
| CVE-2026-108133 | high | 7.8 | No | Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locall... | 2026-10-28 |
| CVE-2026-118276 | low | 3.5 | No | A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers... | 2026-10-28 |
| CVE-2026-118274 | medium | 4.3 | No | A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unknown functionality of the file renderers... | 2026-10-28 |
| CVE-2026-118273 | medium | 4.3 | No | A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of the file renderers/... | 2026-10-28 |
| CVE-2026-118271 | medium | 4.3 | No | A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknown function of the file renderers/web_cor... | 2026-10-28 |
| CVE-2026-118129 | medium | 6.3 | No | A vulnerability was found in jeremyckahn Chitchatter up to f82538633813c854a81a8b2112a2f6ba17b39cbc. The affected element is the function is... | 2026-10-28 |
| CVE-2026-117526 | medium | 5.3 | No | A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remote... | 2026-10-28 |
| CVE-2026-117516 | high | 7.3 | No | A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contact_insert... | 2026-10-28 |
| CVE-2026-117514 | high | 7.3 | No | A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customer_... | 2026-10-28 |
| CVE-2026-117513 | high | 7.3 | No | A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customer_sea... | 2026-10-28 |
| CVE-2026-117511 | high | 7.3 | No | A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function process of the file lib/t... | 2026-10-28 |
| CVE-2026-117510 | medium | 6.3 | No | A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function load_pretrained_gr00t of the file dexbo... | 2026-10-28 |
| CVE-2026-108134 | high | 7.0 | No | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-108399 | high | 7.2 | No | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-69644 | medium | 5.5 | No | Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose inform... | 2026-10-28 |
| CVE-2026-48356 | critical | 9.3 | Listed | Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution... | 2026-10-28 |
| CVE-2026-69650 | high | 7.8 | No | Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges loca... | 2026-10-28 |
| CVE-2026-69743 | high | 7.0 | No | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-69763 | high | 7.0 | No | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | 2026-10-28 |