Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101469 | high | 7.5 | No | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported versi... | 2026-10-21 |
| CVE-2026-106574 | medium | 6.5 | No | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the... | 2026-10-21 |
| CVE-2026-106575 | medium | 5.3 | No | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script ca... | 2026-10-21 |
| CVE-2026-112936 | medium | 6.1 | No | filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4... | 2026-10-21 |
| CVE-2026-83774 | medium | 4.7 | No | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker t... | 2026-10-21 |
| CVE-2026-112937 | medium | 6.1 | No | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, ReadWriteLock can remove a randomized .filelock-* private-h... | 2026-10-21 |
| CVE-2026-112939 | medium | 4.7 | No | filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can trust a forged process identifier in a ma... | 2026-10-21 |
| CVE-2026-97783 | medium | 6.1 | No | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized a... | 2026-10-21 |
| CVE-2024-45778 | medium | 5.5 | No | A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to... | 2026-10-21 |
| CVE-2024-45779 | medium | 6.0 | No | An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to v... | 2026-10-21 |
| CVE-2026-83867 | high | 7.8 | No | Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-83870 | medium | 5.5 | No | Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally. | 2026-10-21 |
| CVE-2026-83871 | high | 7.0 | No | Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-83872 | high | 7.8 | No | Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-113271 | high | 8.8 | No | Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb... | 2026-10-21 |
| CVE-2026-83873 | high | 7.8 | No | Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-83874 | high | 8.8 | No | Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network. | 2026-10-21 |
| CVE-2026-113338 | high | 8.8 | No | Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi... | 2026-10-21 |
| CVE-2026-83876 | high | 7.8 | No | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-9825 | low | 3.7 | No | IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections... | 2026-10-21 |