Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-110287 | medium | 4.3 | No | Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edi... | 2026-10-23 |
| CVE-2026-83862 | high | 8.8 | No | Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network. | 2026-10-23 |
| CVE-2026-98095 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header... | 2026-10-23 |
| CVE-2026-68836 | high | 7.8 | No | Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. | 2026-10-23 |
| CVE-2026-69326 | high | 8.8 | No | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. | 2026-10-23 |
| CVE-2026-69354 | high | 7.8 | No | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 2026-10-23 |
| CVE-2026-69363 | high | 8.0 | No | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. | 2026-10-23 |
| CVE-2026-69387 | high | 7.0 | No | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 2026-10-23 |
| CVE-2026-69452 | high | 7.1 | No | Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. | 2026-10-23 |
| CVE-2026-69471 | high | 7.8 | No | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 2026-10-23 |
| CVE-2026-69506 | medium | 4.7 | No | Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. | 2026-10-23 |
| CVE-2026-69521 | high | 8.8 | No | Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network. | 2026-10-23 |
| CVE-2026-12343 | medium | 6.5 | No | IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued... | 2026-10-23 |
| CVE-2026-12350 | medium | 6.5 | No | IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that c... | 2026-10-23 |
| CVE-2026-12660 | low | 2.7 | No | IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation. | 2026-10-23 |
| CVE-2026-12665 | critical | 9.8 | No | IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malforme... | 2026-10-23 |
| CVE-2026-12669 | medium | 4.3 | No | IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data i... | 2026-10-23 |
| CVE-2026-91635 | high | 8.1 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerabil... | 2026-10-23 |
| CVE-2026-91638 | critical | 9.9 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-23 |
| CVE-2026-91647 | high | 8.1 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerabil... | 2026-10-23 |