Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83404 | high | 7.5 | No | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.... | 2026-10-27 |
| CVE-2026-83403 | high | 8.8 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are aff... | 2026-10-27 |
| CVE-2026-83402 | high | 8.8 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are aff... | 2026-10-27 |
| CVE-2026-83401 | medium | 6.1 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are aff... | 2026-10-27 |
| CVE-2026-118026 | not reported | — | No | Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118025 | not reported | — | No | Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118024 | not reported | — | No | Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118023 | not reported | — | No | Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118022 | not reported | — | No | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 15... | 2026-10-27 |
| CVE-2026-118021 | not reported | — | No | Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118020 | not reported | — | No | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118019 | not reported | — | No | Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118017 | not reported | — | No | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118016 | not reported | — | No | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118015 | not reported | — | No | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118014 | not reported | — | No | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118013 | not reported | — | No | Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118012 | not reported | — | No | Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118011 | not reported | — | No | Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118010 | not reported | — | No | Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |