Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-70095 | high | 7.5 | No | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. | 2026-10-21 |
| CVE-2026-70097 | medium | 5.6 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) E... | 2026-10-21 |
| CVE-2026-70102 | high | 7.8 | No | Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-70103 | high | 7.8 | No | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-70104 | high | 7.8 | No | Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-109946 | medium | 6.5 | No | FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion, so an odd width rea... | 2026-10-21 |
| CVE-2026-109947 | medium | 6.5 | No | FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust cl... | 2026-10-21 |
| CVE-2026-109948 | medium | 4.3 | No | FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call that allows malicious... | 2026-10-21 |
| CVE-2026-101578 | medium | 5.3 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-google-login). Supported versions th... | 2026-10-21 |
| CVE-2026-101577 | low | 3.1 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). Supported versions that are affected are 4.0.0-4... | 2026-10-21 |
| CVE-2026-101576 | low | 3.7 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.5. Dif... | 2026-10-21 |
| CVE-2026-101574 | medium | 6.9 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: OIDC). Supported versions that are affected are 4.0.0-4.5.5 and... | 2026-10-21 |
| CVE-2026-101573 | medium | 6.8 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-http-auth). Supported versions that... | 2026-10-21 |
| CVE-2026-101571 | medium | 5.6 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper). Supported versions tha... | 2026-10-21 |
| CVE-2026-101568 | medium | 5.3 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-health). Supported versions that are affected are 3.0.0... | 2026-10-21 |
| CVE-2026-101565 | medium | 6.2 | No | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Import). The supported version that is affected is 9.3.6. E... | 2026-10-21 |
| CVE-2026-101564 | medium | 5.9 | No | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect). The supported version that is affected is 2.6. D... | 2026-10-21 |
| CVE-2026-101562 | high | 7.5 | No | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect). The supported version that is affected is 2.6. E... | 2026-10-21 |
| CVE-2026-101560 | high | 7.1 | No | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Commerce Server). The supported version that is... | 2026-10-21 |
| CVE-2026-101549 | high | 7.8 | No | Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Easily exploi... | 2026-10-21 |