Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102215 | high | 7.8 | No | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges lo... | 2026-10-21 |
| CVE-2026-102216 | high | 7.8 | No | Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privil... | 2026-10-21 |
| CVE-2026-102217 | high | 8.8 | No | Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. | 2026-10-21 |
| CVE-2026-113045 | medium | 6.5 | No | Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory ins... | 2026-10-21 |
| CVE-2026-113043 | high | 8.8 | No | Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sa... | 2026-10-21 |
| CVE-2026-70284 | medium | 5.5 | No | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 2026-10-21 |
| CVE-2026-70285 | high | 7.8 | No | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-70288 | medium | 5.5 | No | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information lo... | 2026-10-21 |
| CVE-2026-70292 | medium | 5.5 | No | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 2026-10-21 |
| CVE-2026-70293 | medium | 5.5 | No | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 2026-10-21 |
| CVE-2026-70294 | medium | 5.5 | No | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 2026-10-21 |
| CVE-2026-90959 | high | 8.1 | No | A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'file_url' parameter that allows users with file repo... | 2026-10-21 |
| CVE-2026-101667 | medium | 5.4 | No | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected... | 2026-10-21 |
| CVE-2026-101666 | medium | 5.4 | No | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected... | 2026-10-21 |
| CVE-2026-101662 | high | 7.1 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affec... | 2026-10-21 |
| CVE-2026-101661 | high | 7.4 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affec... | 2026-10-21 |
| CVE-2026-101658 | high | 7.4 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affec... | 2026-10-21 |
| CVE-2026-101647 | high | 7.5 | No | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versi... | 2026-10-21 |
| CVE-2026-101646 | high | 7.2 | No | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versi... | 2026-10-21 |
| CVE-2026-101645 | high | 7.5 | No | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versi... | 2026-10-21 |