Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106437 | high | 7.4 | No | The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or compari... | 2026-10-27 |
| CVE-2026-106438 | low | 3.7 | No | An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading ze... | 2026-10-27 |
| CVE-2026-83839 | high | 7.0 | No | Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83840 | high | 7.8 | No | Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83841 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker... | 2026-10-27 |
| CVE-2026-107324 | medium | 5.9 | No | An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or access... | 2026-10-27 |
| CVE-2026-107325 | medium | 5.9 | No | Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application c... | 2026-10-27 |
| CVE-2026-87297 | medium | 6.7 | No | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported... | 2026-10-27 |
| CVE-2026-87296 | high | 7.5 | No | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that a... | 2026-10-27 |
| CVE-2026-87295 | medium | 6.5 | No | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). Supported versions that are affecte... | 2026-10-27 |
| CVE-2026-87294 | medium | 6.5 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit... | 2026-10-27 |
| CVE-2026-87293 | medium | 5.4 | No | Vulnerability in Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle Graa... | 2026-10-27 |
| CVE-2026-87292 | low | 3.7 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network... | 2026-10-27 |
| CVE-2026-87291 | medium | 5.3 | No | Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27... | 2026-10-27 |
| CVE-2026-87263 | high | 8.8 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported ve... | 2026-10-27 |
| CVE-2026-87255 | low | 3.7 | No | Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult t... | 2026-10-27 |
| CVE-2026-83426 | high | 8.7 | No | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that a... | 2026-10-27 |
| CVE-2026-83409 | high | 8.1 | No | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that a... | 2026-10-27 |
| CVE-2026-83407 | high | 8.6 | No | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that a... | 2026-10-27 |
| CVE-2026-83406 | medium | 6.7 | No | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported... | 2026-10-27 |