Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-16818 | high | 7.5 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consum... | 2026-10-27 |
| CVE-2026-16817 | high | 7.5 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference. | 2026-10-27 |
| CVE-2026-76234 | high | 7.5 | No | libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not... | 2026-10-27 |
| CVE-2026-63937 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer... | 2026-10-27 |
| CVE-2026-63927 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to deref... | 2026-10-27 |
| CVE-2026-63925 | high | 8.1 | No | In the Linux kernel, the following vulnerability has been resolved: macsec: fix replay protection at XPN lower-PN wrap In macsec_post_decr... | 2026-10-27 |
| CVE-2026-63923 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notif... | 2026-10-27 |
| CVE-2026-63922 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv() ca... | 2026-10-27 |
| CVE-2026-63921 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). After patch 1/2 in... | 2026-10-27 |
| CVE-2026-63920 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6_data... | 2026-10-27 |
| CVE-2026-63919 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: xfrm: input: hold netns during deferred transport reinjection Transpor... | 2026-10-27 |
| CVE-2026-86950 | high | 8.8 | Listed | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1... | 2026-10-27 |
| CVE-2026-113729 | high | 7.5 | No | Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalizat... | 2026-10-27 |
| CVE-2026-113724 | medium | 4.5 | No | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the safe_delete() deletion error handler responds... | 2026-10-27 |
| CVE-2026-101857 | medium | 6.5 | No | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions th... | 2026-10-27 |
| CVE-2026-101856 | medium | 6.5 | No | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions th... | 2026-10-27 |
| CVE-2026-101855 | medium | 6.5 | No | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are aff... | 2026-10-27 |
| CVE-2026-101851 | high | 7.1 | No | Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions that are affected a... | 2026-10-27 |
| CVE-2026-101850 | medium | 6.1 | No | Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI). Supported versions that are affected are 12.2.3... | 2026-10-27 |
| CVE-2026-101849 | high | 7.6 | No | Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affect... | 2026-10-27 |