Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118252 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit-mode sidebar parses componen... | 2026-10-29 |
| CVE-2026-118251 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and 13.1.0, Highcharts assigns credits.href to the win... | 2026-10-29 |
| CVE-2026-118250 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 6.1.0 until 11.4.9, 12.6.1, and 3.1.0, Highcharts follows dot-separated se... | 2026-10-29 |
| CVE-2026-118248 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards edit mode walks editableOptions p... | 2026-10-29 |
| CVE-2026-118247 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until Dashboards 4.2.2, and from 2.0.0 until Grid Pro 3.2.0, Highcha... | 2026-10-29 |
| CVE-2026-118246 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 11.4.9, 12.6.1, and 13.1.0, Highcharts applies breadcrumbs.st... | 2026-10-29 |
| CVE-2026-118244 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back to assigning raw mar... | 2026-10-29 |
| CVE-2026-118243 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards stores DataCursor listener and st... | 2026-10-29 |
| CVE-2026-118242 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path elements from renderin... | 2026-10-29 |
| CVE-2026-116797 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid Pro input renderers copy the cells.rend... | 2026-10-29 |
| CVE-2026-50543 | medium | 4.3 | No | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, mi... | 2026-10-29 |
| CVE-2026-50542 | medium | 5.4 | No | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, mi... | 2026-10-29 |
| CVE-2026-50539 | medium | 6.5 | No | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, mi... | 2026-10-29 |
| CVE-2026-116099 | high | 8.8 | No | A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks o... | 2026-10-29 |
| CVE-2026-116111 | critical | 9.6 | No | A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the component Lua Sandbox. Execu... | 2026-10-29 |
| CVE-2026-113957 | not reported | — | No | An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pul... | 2026-10-29 |
| CVE-2026-86983 | not reported | — | No | A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its lengt... | 2026-10-29 |
| CVE-2026-106484 | medium | 4.4 | No | Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrar... | 2026-10-29 |
| CVE-2026-93536 | medium | 5.3 | No | A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before 21.1.25 and XWay... | 2026-10-29 |
| CVE-2026-93524 | not reported | — | No | A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to... | 2026-10-29 |