Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-70111 | high | 8.1 | No | Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network. | 2026-10-22 |
| CVE-2026-106494 | medium | 4.9 | No | Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by impro... | 2026-10-22 |
| CVE-2026-70114 | high | 7.8 | No | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70117 | high | 7.8 | No | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70121 | high | 7.8 | No | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70144 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70160 | high | 7.0 | No | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70170 | medium | 6.5 | No | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network. | 2026-10-22 |
| CVE-2026-106564 | medium | 5.3 | No | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can ca... | 2026-10-22 |
| CVE-2026-70176 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70199 | medium | 5.5 | No | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose infor... | 2026-10-22 |
| CVE-2026-70209 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70232 | medium | 5.5 | No | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose infor... | 2026-10-22 |
| CVE-2026-70236 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70243 | high | 7.0 | No | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70249 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70253 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-84284 | medium | 5.3 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 t... | 2026-10-22 |
| CVE-2026-70273 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-114176 | medium | 4.3 | No | Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control S... | 2026-10-22 |