Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-100222 | critical | 9.8 | No | Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. | 2026-10-20 |
| CVE-2026-100225 | high | 7.0 | No | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | 2026-10-20 |
| CVE-2026-102186 | medium | 4.7 | No | Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally. | 2026-10-20 |
| CVE-2026-62895 | high | 8.8 | No | Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network. | 2026-10-20 |
| CVE-2026-102187 | medium | 5.5 | No | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. | 2026-10-20 |
| CVE-2026-111218 | high | 7.2 | No | Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Li... | 2026-10-20 |
| CVE-2026-111219 | high | 7.2 | No | Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.php that allows privileged users to injec... | 2026-10-20 |
| CVE-2026-4921 | low | 2.7 | No | IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message... | 2026-10-20 |
| CVE-2026-111373 | high | 7.5 | No | FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash... | 2026-10-20 |
| CVE-2026-111374 | medium | 5.3 | No | FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets malicious RDP servers request... | 2026-10-20 |
| CVE-2026-111376 | medium | 5.0 | No | FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream_New that allows mal... | 2026-10-20 |
| CVE-2026-111377 | medium | 6.5 | No | FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fr... | 2026-10-20 |
| CVE-2026-111378 | high | 7.5 | No | FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticat... | 2026-10-20 |
| CVE-2026-111381 | high | 7.3 | No | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local attackers to corrupt... | 2026-10-20 |
| CVE-2026-111382 | high | 8.8 | No | FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 tha... | 2026-10-20 |
| CVE-2026-85745 | medium | 4.3 | No | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_A... | 2026-10-20 |
| CVE-2026-85746 | critical | 9.9 | No | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_A... | 2026-10-20 |
| CVE-2026-85748 | critical | 9.9 | No | MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFCURSOR handling is affected becaus... | 2026-10-20 |
| CVE-2026-85985 | medium | 5.4 | No | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the... | 2026-10-20 |
| CVE-2026-86047 | high | 7.7 | No | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW... | 2026-10-20 |