Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106433 | high | 8.8 | No | Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a... | 2026-10-27 |
| CVE-2026-87308 | high | 7.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-27 |
| CVE-2026-87307 | high | 7.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that... | 2026-10-27 |
| CVE-2026-87306 | high | 8.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that... | 2026-10-27 |
| CVE-2026-87305 | high | 8.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-27 |
| CVE-2026-87304 | high | 8.6 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-10-27 |
| CVE-2026-87303 | medium | 5.9 | No | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.... | 2026-10-27 |
| CVE-2026-87301 | high | 8.4 | No | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.... | 2026-10-27 |
| CVE-2026-87300 | high | 8.7 | No | Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for... | 2026-10-27 |
| CVE-2026-87290 | medium | 5.9 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).... | 2026-10-27 |
| CVE-2026-110910 | low | 3.7 | No | ### Summary `qs.stringify` with `allowEmptyArrays: true` writes the key of an empty array without encoding it, even though keys are encoded... | 2026-10-27 |
| CVE-2026-83826 | high | 7.8 | No | Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83827 | high | 7.0 | No | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83828 | high | 7.8 | No | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83829 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83830 | high | 7.8 | No | Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83832 | high | 7.8 | No | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83833 | high | 7.8 | No | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-106117 | high | 7.5 | No | ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using CCITT Group 3 or Modified Huffman compression can p... | 2026-10-27 |
| CVE-2026-83834 | high | 7.0 | No | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 2026-10-27 |