Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87331 | low | 3.4 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported version... | 2026-10-28 |
| CVE-2026-87329 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-87328 | medium | 5.9 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-87327 | medium | 5.9 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-87326 | medium | 5.9 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-87325 | medium | 6.4 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-87324 | medium | 6.4 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-87323 | medium | 5.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |
| CVE-2026-87322 | high | 8.4 | No | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.... | 2026-10-28 |
| CVE-2026-87321 | medium | 6.4 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are... | 2026-10-28 |
| CVE-2026-63573 | high | 7.5 | No | Observable discrepancy in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientInformation.UnwrapKey) in Legion of the Bouncy Cast... | 2026-10-28 |
| CVE-2026-70164 | high | 7.0 | No | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-70168 | high | 7.0 | No | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-63574 | high | 7.5 | No | Memory allocation with excessive size value in the OpenPGP signature and user attribute subpacket parsers (SignatureSubpacketsParser.ReadPac... | 2026-10-28 |
| CVE-2026-70169 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service al... | 2026-10-28 |
| CVE-2026-70172 | high | 7.8 | No | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-70173 | medium | 5.5 | No | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 2026-10-28 |
| CVE-2026-70177 | high | 7.8 | No | Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-70184 | high | 7.8 | No | Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-70185 | high | 8.8 | No | Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally. | 2026-10-28 |