Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-115644 | not reported | — | No | Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a... | 2026-10-29 |
| CVE-2026-112375 | not reported | — | No | An authenticated Kafka principal with no authorization grants (not even ALTER_CONFIGS) can make a broker read a file or an environment varia... | 2026-10-29 |
| CVE-2026-111551 | not reported | — | No | Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate an array, collection, or byte... | 2026-10-29 |
| CVE-2026-111496 | not reported | — | No | Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next() computed the next punctuation time as timesta... | 2026-10-29 |
| CVE-2026-111115 | not reported | — | No | Apache Kafka's code-generated readers for flexible protocol versions read a tagged-field count declared by the sender and retain a RawTagged... | 2026-10-29 |
| CVE-2026-111108 | not reported | — | No | Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count declared by the sender. That count is c... | 2026-10-29 |
| CVE-2026-110985 | not reported | — | No | A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator.class=DefaultJwtValidator) selects its impl... | 2026-10-29 |
| CVE-2026-110952 | not reported | — | No | A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled JWKS-backed validator always verifies the JWT signature, b... | 2026-10-29 |
| CVE-2026-93522 | high | 7.8 | No | A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1... | 2026-10-29 |
| CVE-2026-93521 | high | 7.8 | No | A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by auth... | 2026-10-29 |
| CVE-2026-116370 | critical | 9.6 | No | A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The affected element is the function loadstring of th... | 2026-10-29 |
| CVE-2026-116230 | high | 7.8 | No | A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown function of the com... | 2026-10-29 |
| CVE-2026-85874 | high | 7.8 | No | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally. | 2026-10-29 |
| CVE-2026-85879 | high | 7.0 | No | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally... | 2026-10-29 |
| CVE-2026-85884 | high | 7.8 | No | Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate pr... | 2026-10-29 |
| CVE-2026-83845 | high | 8.4 | No | Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally. | 2026-10-29 |
| CVE-2026-83848 | high | 7.8 | No | Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83849 | medium | 5.5 | No | Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83850 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83851 | high | 8.8 | No | Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network. | 2026-10-29 |