Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-107896 | high | 7.8 | No | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!load_gr_item. Opening a crafted V7 file... | 2026-10-26 |
| CVE-2026-107895 | high | 7.8 | No | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information e... | 2026-10-26 |
| CVE-2026-107894 | high | 7.8 | No | V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Opening a crafted V7 file may lead to inform... | 2026-10-26 |
| CVE-2026-105947 | medium | 6.5 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Telecommunications, and Co... | 2026-10-26 |
| CVE-2026-105930 | not reported | — | No | When package management is enabled, Pulsar Functions, Sources and Sinks can be registered or updated from a package stored in the Pulsar Pac... | 2026-10-26 |
| CVE-2026-103377 | not reported | — | No | A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the web application of the Castile-La Mancha Regional Parliament... | 2026-10-26 |
| CVE-2026-106626 | critical | 9.1 | No | Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the cont... | 2026-10-26 |
| CVE-2026-103568 | high | 7.8 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an author... | 2026-10-26 |
| CVE-2026-103569 | high | 7.5 | No | Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. | 2026-10-26 |
| CVE-2026-103578 | medium | 6.8 | No | Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. | 2026-10-26 |
| CVE-2026-105004 | high | 7.8 | No | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-105005 | high | 8.1 | No | Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network. | 2026-10-26 |
| CVE-2026-102218 | high | 7.8 | No | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges lo... | 2026-10-26 |
| CVE-2026-102220 | high | 7.8 | No | Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-102221 | medium | 4.4 | No | No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | 2026-10-26 |
| CVE-2026-102225 | high | 8.8 | No | Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | 2026-10-26 |
| CVE-2026-106628 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-10-26 |
| CVE-2026-102227 | high | 7.8 | No | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. | 2026-10-26 |
| CVE-2026-106629 | critical | 9.3 | No | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject mali... | 2026-10-26 |
| CVE-2026-106630 | critical | 9.3 | No | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject mali... | 2026-10-26 |