Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-69634 | critical | 9.8 | No | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. | 2026-10-26 |
| CVE-2026-69635 | medium | 6.6 | No | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack. | 2026-10-26 |
| CVE-2026-69639 | critical | 9.8 | No | Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. | 2026-10-26 |
| CVE-2026-69640 | medium | 5.3 | No | Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network. | 2026-10-26 |
| CVE-2026-103553 | high | 7.8 | No | Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-103554 | high | 7.0 | No | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-103558 | high | 7.5 | No | Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | 2026-10-26 |
| CVE-2026-103565 | high | 7.0 | No | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-98166 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix swapped-out resources never leaving their bulk_move range... | 2026-10-26 |
| CVE-2026-76526 | high | 8.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security revie... | 2026-10-26 |
| CVE-2026-76300 | high | 8.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security revie... | 2026-10-26 |
| CVE-2026-77931 | high | 8.8 | No | MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding mali... | 2026-10-26 |
| CVE-2026-65226 | not reported | — | No | Rejected reason: This CVE ID has been rejected by runZero as unused. | 2026-10-26 |
| CVE-2026-65222 | not reported | — | No | Rejected reason: The reported issue could not be reproduced, and the affected products are end-of-life. This CVE ID is unused by the CNA. | 2026-10-26 |
| CVE-2026-65221 | not reported | — | No | Rejected reason: The reported issue was assessed as intended functionality. This CVE ID is unused by the CNA. | 2026-10-26 |
| CVE-2026-65218 | not reported | — | No | Rejected reason: The reported issue is tracked under CVE-2026-18451. This CVE ID is rejected as a duplicate. | 2026-10-26 |
| CVE-2026-65217 | not reported | — | No | Rejected reason: The reported issue could not be reproduced. This CVE ID is unused by the CNA. | 2026-10-26 |
| CVE-2026-65216 | not reported | — | No | Rejected reason: The reported issue is tracked under CVE-2026-18450. This CVE ID is rejected as a duplicate. | 2026-10-26 |
| CVE-2026-65215 | not reported | — | No | Rejected reason: The reported issue could not be reproduced. This CVE ID is unused by the CNA. | 2026-10-26 |
| CVE-2026-65214 | not reported | — | No | Rejected reason: The reported issue is tracked under CVE-2026-18449. This CVE ID is rejected as a duplicate. | 2026-10-26 |