Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-103602 | medium | 5.3 | No | Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker... | 2026-10-28 |
| CVE-2026-103603 | high | 7.5 | No | Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignature) in Legion of the Bouncy Cas... | 2026-10-28 |
| CVE-2026-103604 | high | 7.5 | No | Inefficient algorithmic complexity in X.509 distinguished name string conversion (X509Name.ToString and IetfUtilities.ValueToString) in Legi... | 2026-10-28 |
| CVE-2026-70141 | medium | 5.5 | No | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 2026-10-28 |
| CVE-2026-63570 | high | 7.5 | No | Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an... | 2026-10-28 |
| CVE-2026-70142 | high | 7.8 | No | Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-70143 | high | 7.8 | No | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally. | 2026-10-28 |
| CVE-2026-70163 | high | 7.5 | No | Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-63571 | high | 7.5 | No | Improper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator, also used by PkixAt... | 2026-10-28 |
| CVE-2026-63572 | high | 7.5 | No | Allocation of resources without limits in PKCS#12 keystore loading (Pkcs12Store.Load) in Legion of the Bouncy Castle Inc. bc-csharp before 2... | 2026-10-28 |
| CVE-2026-87343 | medium | 4.8 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affecte... | 2026-10-28 |
| CVE-2026-87340 | low | 3.7 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affecte... | 2026-10-28 |
| CVE-2026-87339 | low | 3.1 | No | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26... | 2026-10-28 |
| CVE-2026-87338 | medium | 6.9 | No | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.... | 2026-10-28 |
| CVE-2026-87337 | critical | 10.0 | No | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that a... | 2026-10-28 |
| CVE-2026-87336 | medium | 5.3 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affecte... | 2026-10-28 |
| CVE-2026-87335 | medium | 6.5 | No | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affec... | 2026-10-28 |
| CVE-2026-87334 | medium | 5.5 | No | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are... | 2026-10-28 |
| CVE-2026-87333 | low | 3.6 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-87332 | low | 3.0 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - Cloud). Supported versio... | 2026-10-28 |