Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112392 | high | 7.5 | No | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image... | 2026-10-26 |
| CVE-2026-85909 | medium | 5.5 | No | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | 2026-10-26 |
| CVE-2026-85910 | medium | 5.5 | No | Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally. | 2026-10-26 |
| CVE-2026-85911 | high | 7.8 | No | Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-85912 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an auth... | 2026-10-26 |
| CVE-2026-109940 | medium | 4.6 | No | FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName() in WinPR's NCrypt... | 2026-10-26 |
| CVE-2026-109939 | medium | 6.5 | No | FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in libfreerdp/core/orders.c, which a... | 2026-10-26 |
| CVE-2026-109938 | medium | 6.5 | No | Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client af... | 2026-10-26 |
| CVE-2026-70112 | high | 7.8 | No | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally. | 2026-10-26 |
| CVE-2026-70113 | high | 7.8 | No | Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-70008 | high | 7.8 | No | Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-70010 | high | 7.8 | No | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-70011 | medium | 5.5 | No | Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally. | 2026-10-26 |
| CVE-2026-20293 | high | 7.1 | No | A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could... | 2026-10-26 |
| CVE-2026-69765 | high | 8.8 | No | Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network. | 2026-10-26 |
| CVE-2026-69766 | high | 7.0 | No | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-69783 | high | 7.8 | No | External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-109941 | medium | 6.5 | No | FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious RD Gateways to hang cli... | 2026-10-26 |
| CVE-2026-69795 | high | 7.0 | No | Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-109942 | medium | 6.5 | No | FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libfreerdp/core/gateway/rdg.c because rdg_process_cont... | 2026-10-26 |